Known vulnerabilities in AWP Classifieds

Create a classified listings directory, from auto listings to yard sales with AWP Classifieds plugin.

12Reported vulnerabilities

7.5Highest CVSS score

4.4.8Latest version

3,000+Active installs

What to do now

Update AWP Classifieds to 4.4.8 or later. 12 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 21, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2012-4874	High 7.2	2.6%	Before 2.0	`2.0`	April 3, 2012
CVE-2026-59550	High 7.5	0.2%	4.4.7 and earlier	`4.4.8`	July 23, 2026
CVE-2026-5100	High 7.5	0.4%	0 to 4.4.5 (inclusive)	`4.4.6.1`	May 5, 2026
CVE-2026-39533	High 7.5	0.3%	4.4.4 and earlier	`4.4.5`	April 8, 2026
CVE-2025-57928	Medium 6.5	0.3%	4.4.3 and earlier	`4.4.4`	September 22, 2025
WF-a52ed75b-07ce-46dc-8321-d10074ce0f61	Medium 6.1	—	3.3.1 and earlier	`3.3.2`	December 9, 2014
CVE-2026-65469	Medium 5.3	0.3%	4.4.7 and earlier	`4.4.8`	July 22, 2026
CVE-2026-42726	Medium 5.3	0.2%	4.4.5 and earlier	`4.4.6`	May 12, 2026
CVE-2026-24593	Medium 5.3	0.3%	4.4.3 and earlier	`4.4.4`	January 16, 2026
CVE-2024-32447	Medium 4.3	0.2%	4.3.1 and earlier	`4.3.2`	April 12, 2024
CVE-2024-31350	Medium 4.3	0.3%	4.3.1 and earlier	`4.3.2`	April 5, 2024
CVE-2023-41801	Medium 4.3	0.2%	4.3 and earlier	`4.3.1`	September 5, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.