CVE-2026-19074 — Advanced Classifieds & Directory Pro < 3.4.3 - Unauthenticated Non-Public Listing Custom Field Disclosure

CVE-2026-19074

Advanced Classifieds & Directory Pro < 3.4.3 - Unauthenticated Non-Public Listing Custom Field Disclosure PUBLISHED

Description (CNA)

The Advanced Classifieds & Directory Pro Advanced Classifieds & Directory Pro WordPress plugin before 3.4.3 (<= 3.4.2) is vulnerable to unauthenticated sensitive information exposure via the AJAX action `acadp_public_custom_fields_listings`.

Affected (CNA)

Vendor / product	Versions
Unknown / Advanced Classifieds & Directory Pro	affected 0 before 3.4.3

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/657cb9f9-8be6-4841-b8a1-93d26a3d7984/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.