Unknown Awp Classifieds vulnerabilities

2 CVEs affecting Unknown Awp Classifieds, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-96904, published 2026-10-14.

More from Unknown.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-15700, published 2026-10-09. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP archive during its listing-import feature, allowing users with the AWP Classifieds…
• CVE-2026-96904, published 2026-10-14. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. The AWP Classifieds WordPress plugin before 4.4.9 does not verify that a request is authorised to view a listing when a payment transaction is referenced, allowing unauthenticated attackers to bypass…