SQL Injection Vulnerability in AWP Classifieds Plugin for WordPress

CVE-2026-5100

What is CVE-2026-5100?

The AWP Classifieds plugin for WordPress contains a vulnerability that exposes it to SQL Injection attacks through the 'regions' parameter array keys. This occurs due to inadequate escaping of user-supplied input and insufficient preparation of SQL queries. As a result, attackers can manipulate existing SQL queries, potentially gaining unauthorized access to sensitive information stored in the database. If you are using this plugin, it is crucial to update to the latest version to mitigate the risk.

References