← WordPress Vulnerabilities
WordPress security by component

Classified Listing

Classified Listing is a WordPress component with 25 published CVE records in this archive. The latest tracked vulnerability was published Jul 21, 2026; the highest CVE/CNA score is 8.8.

Plugin slug: classified-listing

CVE-2026-14183: Classified Listing: A security weakness

Classified Listing is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is < 5.3.9.

PublishedJul 21, 2026
Known safe version5.3.9
Safe version
Jul 21, 2026 CVE-2026-14183
Classified Listing: A security weakness
Classified Listing is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is < 5.3.9.
5.3.9
CVE4.3
NVDPending
Jul 02, 2026 CVE-2026-57355
Classified Listing: A security weakness
Classified Listing is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 5.4.2.
5.4.3
CVE6.5
NVDPending
Jul 02, 2026 CVE-2026-57344
Classified Listing: Cross-site scripting
Classified Listing is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 5.4.2.
5.4.3
CVE7.1
NVDPending
Jun 19, 2026 CVE-2026-10779
Classified Listing – AI-Powered Classified ads & Business Directory: A security weakness
Classified Listing – AI-Powered Classified ads & Business Directory is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 5.4.2.
> 5.4.2
CVE4.3
NVDPending
Jun 15, 2026 CVE-2026-42658
Classified Listing: Cross-site scripting
Classified Listing is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 5.3.8.
5.3.9
CVE7.1
NVDPending
Jun 15, 2026 CVE-2026-42651
Classified Listing: A security weakness
Classified Listing is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 5.3.9.
5.3.10
CVE6.3
NVDPending
Jun 15, 2026 CVE-2026-42640
Classified Listing: A security weakness
Classified Listing is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 5.3.8.
5.3.9
CVE6.5
NVDPending
Jun 01, 2026 CVE-2026-42679
Classified Listing: Filesystem traversal
Classified Listing is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server. The published affected range is n/a through 5.3.8.
5.3.9
CVE6.5
NVDPending
May 15, 2026 CVE-2026-7563
Classified Listing – AI-Powered Classified ads & Business Directory Plugin: A security weakness
Classified Listing – AI-Powered Classified ads & Business Directory Plugin is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 5.3.10.
> 5.3.10
CVE4.3
NVDPending
Mar 05, 2026 CVE-2026-23546
Classified Listing: A security weakness
Classified Listing is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE6.5
NVDPending
Nov 17, 2025 CVE-2025-7711
The Classified Listing – Classified ads & Business Directory Plugin: A security weakness
The Classified Listing – Classified ads & Business Directory Plugin is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.4
NVDPending
Sep 03, 2025 CVE-2025-58601
Classified Listing: A security weakness
Classified Listing is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVDPending
Aug 14, 2025 CVE-2025-54698
Classified Listing: Cross-site scripting
Classified Listing is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE5.4
NVDPending
Jun 20, 2025 CVE-2025-52715
Classified Listing: Filesystem traversal
Classified Listing is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE7.5
NVDPending
Apr 17, 2025 CVE-2025-24745
Classified Listing: Cross-site scripting
Classified Listing is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE7.1
NVDPending
Feb 25, 2025 CVE-2025-1063
Classified Listing – Classified ads & Business Directory Plugin: Sensitive information exposure
Classified Listing – Classified ads & Business Directory Plugin is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.
See mitigation notes
CVE5.3
NVDPending
Nov 19, 2024 CVE-2024-11194
Classified Listing – Classified ads & Business Directory Plugin: Privilege escalation or authentication bypass
Classified Listing – Classified ads & Business Directory Plugin is affected by privilege escalation or authentication bypass. Exploitation requires at least subscriber-level access. A successful request can grant permissions or access that the caller should not possess.
See mitigation notes
CVE8.8
NVDPending
Nov 16, 2024 CVE-2024-52386
Classified Listing: Filesystem traversal
Classified Listing is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE5.3
NVDPending
Sep 13, 2024 CVE-2024-7888
Classified Listing – Classified ads & Business Directory Plugin: A security weakness
Classified Listing – Classified ads & Business Directory Plugin is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE6.3
NVD4.3
Apr 25, 2024 CVE-2024-3893
Classified Listing – Classified ads & Business Directory Plugin: A security weakness
Classified Listing – Classified ads & Business Directory Plugin is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVD4.3
Apr 09, 2024 CVE-2024-1352
Classified Listing – Classified ads & Business Directory Plugin: A security weakness
Classified Listing – Classified ads & Business Directory Plugin is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE6.5
NVD5.3
Apr 09, 2024 CVE-2024-1315
Classified Listing – Classified ads & Business Directory Plugin: Cross-site request forgery
Classified Listing – Classified ads & Business Directory Plugin is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE8.8
NVDPending
Jul 18, 2023 CVE-2023-37387
Classified Listing: Cross-site request forgery
Classified Listing is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE5.4
NVD8.8
Sep 16, 2022 CVE-2022-2655
Classified Listing Pro: Cross-site scripting
Classified Listing Pro is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.1
NVD6.1
Sep 16, 2022 CVE-2022-2654
Classima: Cross-site scripting
Classima is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.1
NVD6.1