Sensitive Data Exposure in AWP Classifieds Plugin by Strategy11
CVE-2026-24593

5.3MEDIUM

Key Information:

Vendor

WordPress
Status
AWP Classifieds
Vendor
CVE Published:
23 January 2026

What is CVE-2026-24593?

The AWP Classifieds Plugin by Strategy11 contains a vulnerability that allows unauthorized retrieval of embedded sensitive data. This issue can impact users by exposing confidential system information, potentially leading to further security breaches. It is essential for users running versions up to and including 4.4.3 to apply security measures to mitigate risks associated with this exploitation.

Affected Version(s)

AWP Classifieds 0 <= 4.4.3

References

https://patchstack.com/database/Wordpress/Plugin/another-...
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Phat RiO | Patchstack Bug Bounty Program
.