CVE-2026-24593 PUBLISHED

WordPress AWP Classifieds plugin <= 4.4.3 - Sensitive Data Exposure vulnerability

Assigner: Patchstack
Reserved: 23.01.2026 Published: 23.01.2026 Updated: 23.01.2026

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Retrieve Embedded Sensitive Data.This issue affects AWP Classifieds: from n/a through <= 4.4.3.

Product Status

Vendor	Strategy11 Team
Product	AWP Classifieds
Versions	Default: unaffected affected from n/a to <= 4.4.3 (incl.)

Credits

Phat RiO | Patchstack Bug Bounty Program finder

References

https://patchstack.com/database/Wordpress/Plugin/another-wordpress-classifieds-plugin/vulnerability/wordpress-awp-classifieds-plugin-4-4-3-sensitive-data-exposure-vulnerability?_s_id=cve

Problem Types

Exposure of Sensitive System Information to an Unauthorized Control Sphere CWE

Impacts

Retrieve Embedded Sensitive Data