← WordPress Vulnerabilities
WordPress security by component

Advanced Classifieds & Directory Pro

Advanced Classifieds & Directory Pro is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Dec 24, 2025; the highest CVE/CNA score is 8.5.

Plugin slug: advanced-classifieds-and-directory-pro

CVE-2025-68580: Advanced Classifieds & Directory Pro: Cross-site request forgery

Advanced Classifieds & Directory Pro is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.

PublishedDec 24, 2025
Safe version guidanceSee mitigation notes
Safe version
Dec 24, 2025 CVE-2025-68580
Advanced Classifieds & Directory Pro: Cross-site request forgery
Advanced Classifieds & Directory Pro is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE4.3
NVDPending
Jul 09, 2024 CVE-2024-37501
Advanced Classifieds & Directory Pro: Filesystem traversal
Advanced Classifieds & Directory Pro is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE8.5
NVDPending
Apr 09, 2024 CVE-2024-2222
Advanced Classifieds & Directory Pro: A security weakness
Advanced Classifieds & Directory Pro is affected by a security weakness. Exploitation requires an authenticated WordPress account. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVDPending