Description
The Advanced Classifieds & Directory Pro Advanced Classifieds & Directory Pro WordPress plugin before 3.4.3 (<= 3.4.2) is vulnerable to unauthenticated sensitive information exposure via the AJAX action `acadp_public_custom_fields_listings`.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Advanced Classifieds & Directory Pro | < 3.4.3 | 3.4.3 |
References
- https://wpscan.com/vulnerability/657cb9f9-8be6-4841-b8a1-93d26a3d7984/ exploit vdb-entry technical-description