AWP Classifieds CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review AWP Classifieds CVE published 2026-10-14

CVE-2026-96904

The AWP Classifieds WordPress plugin before 4.4.9 does not verify that a request is authorised to view a listing when a payment transaction is referenced, allowing unauthenticated attackers to bypass the ownership check on the ad submission page and read the private contact email stored on any listing. This vulnerability can lead to unauthorized access to sensitive information, including listing contact e [truncated]