Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 15:17:27 +0000 CVE-2026-96904 — AWP Classifieds < 4.4.9 - Unauthenticated Listing Contact Email Disclosure via Place Ad Page https://db.gcve.eu/vuln/cve-2026-96904 <p><strong>Affected:</strong> Unknown AWP Classifieds</p> <p>The AWP Classifieds WordPress plugin before 4.4.9 does not verify that a request is authorised to view a listing when a payment transaction is referenced, allowing unauthenticated attackers to bypass the ownership check on the ad submission page and read the private contact email stored on any listing.</p> <p><strong>Affected:</strong> Unknown AWP Classifieds</p> <p>The AWP Classifieds WordPress plugin before 4.4.9 does not verify that a request is authorised to view a listing when a payment transaction is referenced, allowing unauthenticated attackers to bypass the ownership check on the ad submission page and read the private contact email stored on any listing.</p> https://db.gcve.eu/vuln/cve-2026-96904