Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
WPAdverts Security: Unauthorized Access to Sensitive Data
CVE-2026-27092
Summary
An issue in WPAdverts allows attackers to access sensitive data if access control settings are not properly configured. This affects WPAdverts versions up to 2.2.11. To protect your site, update to the latest version of WPAdverts or adjust your access control settings to prevent unauthorized access.
Original title
Missing Authorization vulnerability in Greg Winiarski WPAdverts wpadverts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPAdverts: from n/a through <= 2...
Original description
Missing Authorization vulnerability in Greg Winiarski WPAdverts wpadverts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPAdverts: from n/a through <= 2.2.11.
nvd CVSS3.1
6.5
Vulnerability type
CWE-862
Missing Authorization
Published: 19 Feb 2026 · Updated: 11 Mar 2026 · First seen: 6 Mar 2026