Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

13 records

Vendor: Greg Winiarski Clear all filters
TI-2026-70499 CVE-2026-97264 · GHSA-j23p-f6rg-gwj8

Reflected cross-site scripting in WordPress WPAdverts plugin

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows Reflected XSS.This issue affects WPAdverts: from n/a through 2.3.4.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00146 Published 2026-10-10 No fix listed CWE-79
TI-2026-70498 CVE-2026-97263 · GHSA-m8fh-8h6x-wrw7

Stored cross-site scripting in WordPress WPAdverts plugin

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows Stored XSS.This issue affects WPAdverts: from n/a through 2.3.4.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00142 Published 2026-10-10 No fix listed CWE-79
TI-2026-21551 CVE-2026-27092 · GHSA-4vj8-cj7h-j8rx

WordPress WPAdverts plugin <= 2.3.0 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in Greg Winiarski WPAdverts wpadverts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPAdverts: from n/a through <= 2.3.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00306 Published 2026-02-19 No fix listed CWE-862
TI-2025-36613 CVE-2025-58969 · GHSA-8r94-x77r-p9r8

WordPress Custom Login URL Plugin <= 1.0.2 - Broken Access Control Vulnerability

Priority LOW 30

Missing Authorization vulnerability in Greg Winiarski Custom Login URL custom-login-url allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Login URL: from n/a through <= 1.0…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00273 Published 2025-09-22 No fix listed CWE-862
TI-2025-33869 CVE-2025-54024 · GHSA-cxrw-9r4q-3prw

WordPress WPAdverts plugin <= 2.2.5 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows DOM-Based XSS.This issue affects WPAdverts: from n/a through <= 2.2.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00199 Published 2025-07-16 No fix listed CWE-79
TI-2025-31793 CVE-2025-49878 · GHSA-x9f2-fj8q-7qg8

WordPress WPAdverts plugin <= 2.2.4 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows DOM-Based XSS.This issue affects WPAdverts: from n/a through <= 2.2.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00192 Published 2025-06-17 No fix listed CWE-79
TI-2025-30595 CVE-2025-48269 · GHSA-2mj9-934c-5ccv

WordPress WPAdverts plugin <= 2.2.3 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows DOM-Based XSS.This issue affects WPAdverts: from n/a through <= 2.2.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00219 Published 2025-05-19 No fix listed CWE-79
TI-2025-29937 CVE-2025-47440 · GHSA-xf87-h3fp-vmxm

WordPress WPAdverts plugin <= 2.2.2 - Local File Inclusion Vulnerability

Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Greg Winiarski WPAdverts wpadverts allows PHP Local File Inclusion.This issue affects WPAdverts: fr…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00778 Published 2025-05-07 No fix listed CWE-98
TI-2025-26318 CVE-2025-39576 · GHSA-5q5m-hp58-38wm

WordPress WPAdverts plugin <= 2.2.1 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows Stored XSS.This issue affects WPAdverts: from n/a through <= 2.2.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00324 Published 2025-04-16 No fix listed CWE-79