A vulnerability was found in gwin WPAdverts Plugin up to 2.3.2 on WordPress. It has been rated as problematic. Impacted is an unknown function of the component Classifieds Types REST Endpoint. The manipulation leads to authorization bypass.
This vulnerability is uniquely identified as CVE-2026-11801. The attack is possible to be carried out remotely. No exploit exists.