Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Classified Listing – AI-Powered Classified ads & Business Directory Plugin — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in Classified Listing – AI-Powered Classified ads & Business Directory Plugin, with AI-generated Chinese analysis, references, and POCs.

Vendor: techlabpro1

CVE IDTitleCVSSSeverityPublished
CVE-2025-7711 Classified Listing – Classified ads & Business Directory Plugin <= 5.0.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Listing Description CWE-94 5.4 Medium2025-11-17
CVE-2025-12953 Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.2.0 - Missing Authorization to Authenticated (Subscriber+) Listing Types Tampering CWE-862 4.3 Medium2025-11-11
CVE-2025-1063 Classified Listing – Classified ads & Business Directory Plugin <= 4.0.4 - Unauthenticated Settings Exposure CWE-200 5.3 Medium2025-02-25
CVE-2024-11194 Classified Listing – Classified ads & Business Directory Plugin <= 3.1.15.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update CWE-862 8.8 High2024-11-19
CVE-2024-7888 Classified Listing – Classified ads & Business Directory Plugin <= 3.1.7 - Missing Authorization CWE-862 6.3 Medium2024-09-13
CVE-2024-3893 Classified Listing – Classified ads & Business Directory Plugin <= 3.0.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion CWE-862 4.3 Medium2024-04-25
CVE-2024-1352 Classified Listing – Classified ads & Business Directory Plugin <= 3.0.4 - Missing Authorization CWE-862 6.5 Medium2024-04-09
CVE-2024-1315 Classified Listing <= 3.0.4 - Cross-Site Request Forgery to Account Takeover via rtcl_update_user_account CWE-352 8.8 High2024-04-09

All 8 known CVE vulnerabilities affecting Classified Listing – AI-Powered Classified ads & Business Directory Plugin with full Chinese analysis, references, and POCs where available.