CVE-2026-19074: Unknown Advanced Classifieds & Directory Pro

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

The Advanced Classifieds & Directory Pro Advanced Classifieds & Directory Pro WordPress plugin before 3.4.3 (<= 3.4.2) is vulnerable to unauthenticated sensitive information exposure via the AJAX action `acadp_public_custom_fields_listings`.

Affected products

• Unknown Advanced Classifieds & Directory Pro: before 3.4.3 (fixed in 3.4.3)

Published 2026-08-10. Last modified 2026-08-26.