CVE
CVE-2022-3254
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users and when a specific premium module is active, leading to a SQL injection
Attack Vector
Network
Privileges Req.
None
User Interaction
None
wordpress classifieds plugin – ad directory & listings by awp classifieds
Updated Nov 7, 2026View on NVD →
This CVE is in S4E's catalog, but no public scanner is mapped to it yet.
CVE history: wordpress classifieds plugin – ad directory & listings by awp classifieds
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →