Greg Winiarski

10 CVEs across 2 Greg Winiarski products. Browse Greg Winiarski vulnerabilities, severities, and proof-of-concept exploits.

Greg Winiarski products with known CVEs

ProductCVEs
Wpadverts9
Custom Login Url1
Greg Winiarski CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57366High7.12026-07-02Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.1 versions.
CVE-2026-40782Medium6.52026-06-15Unauthenticated Broken Access Control in WPAdverts <= 2.3.0 versions.
CVE-2026-27092Medium6.52026-02-19Missing Authorization vulnerability in Greg Winiarski WPAdverts wpadverts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…
CVE-2025-58969Medium5.32025-09-22Missing Authorization vulnerability in Greg Winiarski Custom Login URL custom-login-url allows Exploiting Incorrectly Configured Access Control Security Levels…
CVE-2025-54024Medium6.52025-07-16Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows DOM-Based XSS.T…
CVE-2025-49878Medium6.52025-06-17Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows DOM-Based XSS.T…
CVE-2025-48269Medium6.52025-05-19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows DOM-Based XSS.T…
CVE-2025-47440High7.52025-05-07Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Greg Winiarski WPAdverts wpadverts all…
CVE-2025-39576Medium6.52025-04-16Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows Stored XSS.This…
CVE-2024-37238Medium4.32025-01-02Cross-Site Request Forgery (CSRF) vulnerability in Greg Winiarski WPAdverts wpadverts allows Cross Site Request Forgery.This issue affects WPAdverts: from n/a…