Classified Listing – AI-Powered Classified ads & Business Directory

Güvenlik açıkları

• CVE-2024-1315kimlik doğrulamasız · tıklama gerekir≤ 3.0.4

  Classified Listing <= 3.0.4 - Cross-Site Request Forgery to Account Takeover via rtcl_update_user_account

  Yüksek 8.8

• CVE-2023-37387kimlik doğrulamasız · tıklama gerekir≤ 2.4.5

  WordPress Classified Listing Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2024-11194abone+≤ 3.1.15.1

  Classified Listing – Classified ads & Business Directory Plugin <= 3.1.15.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update

  Yüksek 8.8

• CVE-2025-52715giriş gerekir≤ 4.2.0

  WordPress Classified Listing plugin <= 4.2.0 - Local File Inclusion Vulnerability

  Yüksek 7.5

• CVE-2026-96351kimlik doğrulamasız · tıklama gerekir≤ 6.1.3

  WordPress Classified Listing plugin <= 6.1.3 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-57344kimlik doğrulamasız · tıklama gerekir≤ 5.4.2

  WordPress Classified Listing plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-42658kimlik doğrulamasız · tıklama gerekir≤ 5.3.8

  WordPress Classified Listing plugin <= 5.3.8 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2025-24745kimlik doğrulamasız · tıklama gerekir≤ 4.0.1

  WordPress Classified Listing plugin <= 4.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-42640kimlik doğrulamasız≤ 5.3.8

  WordPress Classified Listing plugin <= 5.3.8 - Broken Access Control vulnerability

  Orta 6.5

• CVE-2026-57355abone+≤ 5.4.2

  WordPress Classified Listing plugin <= 5.4.2 - Broken Access Control vulnerability

  Orta 6.5

• CVE-2026-42679giriş gerekir≤ 5.3.8

  WordPress Classified Listing plugin <= 5.3.8 - Arbitrary File Download vulnerability

  Orta 6.5

• CVE-2026-23546giriş gerekir≤ 5.3.4

  WordPress Classified Listing plugin <= 5.3.4 - Sensitive Data Exposure vulnerability

  Orta 6.5

• CVE-2026-42651abone+≤ 5.3.9

  WordPress Classified Listing plugin <= 5.3.9 - Broken Access Control vulnerability

  Orta 6.3

• CVE-2026-84217giriş gerekir≤ 6.1.3

  WordPress Classified Listing plugin <= 6.1.3 - Broken Access Control vulnerability

  Orta 5.4

• CVE-2025-7711abone+≤ 5.0.3

  Classified Listing – Classified ads & Business Directory Plugin <= 5.0.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Listing Description

  Orta 5.4

• CVE-2025-54698giriş gerekir≤ 5.0.0

  WordPress Classified Listing Plugin plugin <= 5.0.0 - Content Injection Vulnerability

  Orta 5.4

• CVE-2025-1063kimlik doğrulamasız≤ 4.0.4

  Classified Listing – Classified ads & Business Directory Plugin <= 4.0.4 - Unauthenticated Settings Exposure

  Orta 5.3

• CVE-2024-52386giriş gerekir≤ 3.1.16

  WordPress Classified Listing plugin <= 3.1.16 - Local File Inclusion vulnerability

  Orta 5.3

• CVE-2024-1352abone+≤ 3.0.4

  Classified Listing – Classified ads & Business Directory Plugin <= 3.0.4 - Missing Authorization

  Orta 5.3

• CVE-2026-10779abone+≤ 5.4.2

  Classified Listing <= 5.4.2 - Missing Authorization to Authenticated (Subscriber+) Feature Modification via Multiple AJAX Handlers ('listingId'/'id' Parameters)

  Orta 4.3

• CVE-2026-7563abone+≤ 5.3.10

  Classified Listing <= 5.3.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via add_order_note and send_email_to_user_by_moderato

  Orta 4.3

• CVE-2025-12953abone+≤ 5.2.0

  Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.2.0 - Missing Authorization to Authenticated (Subscriber+) Listing Types Tamperi

  Orta 4.3

• CVE-2025-58601giriş gerekir≤ 5.0.6

  WordPress Classified Listing Plugin <= 5.0.6 - Broken Access Control Vulnerability

  Orta 4.3

• CVE-2024-7888abone+≤ 3.1.7

  Classified Listing – Classified ads & Business Directory Plugin <= 3.1.7 - Missing Authorization

  Orta 4.3

• CVE-2024-3893abone+≤ 3.0.10.3

  Classified Listing – Classified ads & Business Directory Plugin <= 3.0.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion

  Orta 4.3