Product

WPAdverts – Classifieds Plugin (<= 2.3.4)

1 brief RSS

Stored Cross-Site Scripting in WPAdverts Plugin

The WPAdverts plugin for WordPress contains a stored XSS vulnerability (CVE-2026-100178) that allows unauthenticated attackers to inject malicious scripts via the 'adverts_location' parameter.

WPAdverts – Classifieds Plugin web-application xss wordpress

2t 1c 7m ago