Skip to content
OpenAdvisories

Vendor

Greg Winiarski

13 known vulnerabilities.

Products

WPAdverts 12 Custom Login URL 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-40782

    WordPress WPAdverts plugin <= 2.3.0 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in WPAdverts <= 2.3.0 versions.

    Greg Winiarski WPAdverts
  • Medium 6.5
    CVE-2026-27092

    WordPress WPAdverts plugin <= 2.3.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Greg Winiarski WPAdverts wpadverts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPAdverts: from n/a through <= 2.3.0.

    Greg Winiarski WPAdverts
  • Medium 5.3
    CVE-2025-58969

    WordPress Custom Login URL Plugin <= 1.0.2 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Greg Winiarski Custom Login URL custom-login-url allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Login URL: from n/a through <= 1.0.2.

    Greg Winiarski Custom Login URL
  • Medium 6.5
    CVE-2025-54024

    WordPress WPAdverts plugin <= 2.2.5 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows DOM-Based XSS.This issue affects WPAdverts: from n/a through <= 2.2.5.

    Greg Winiarski WPAdverts
  • Medium 6.5
    CVE-2025-49878

    WordPress WPAdverts plugin <= 2.2.4 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows DOM-Based XSS.This issue affects WPAdverts: from n/a through <= 2.2.4.

    Greg Winiarski WPAdverts
  • Medium 6.5
    CVE-2025-48269

    WordPress WPAdverts plugin <= 2.2.3 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows DOM-Based XSS.This issue affects WPAdverts: from n/a through <= 2.2.3.

    Greg Winiarski WPAdverts
  • Medium 6.5
    CVE-2025-39576

    WordPress WPAdverts plugin <= 2.2.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows Stored XSS.This issue affects WPAdverts: from n/a through <= 2.2.1.

    Greg Winiarski WPAdverts
  • Medium 4.3
    CVE-2024-37238

    WordPress WPAdverts plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Greg Winiarski WPAdverts wpadverts allows Cross Site Request Forgery.This issue affects WPAdverts: from n/a through <= 2.1.2.

    Greg Winiarski WPAdverts