CVE-2022-3254: STRATEGY11 Awp Classifieds

Critical severity, CVSS 9.8. EPSS: 5.5% chance of exploitation in the next 30 days.

The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users and when a specific premium module is active, leading to a SQL injection

Affected products

• STRATEGY11 Awp Classifieds: before 4.3 (fixed in 4.3)

Published 2022-10-31. Last modified 2026-06-17.