Vulnerabilities

TI-2025-00902 CVE-2025-1063 · GHSA-jhm9-f485-756r

Classified Listing – Classified ads & Business Directory Plugin <= 4.0.4 - Unauthenticated Settings Exposure

LOW 30

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.0.4 via the rtcl_taxonomy_settings_export f…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00355 Published 2025-02-25 No fix listed CWE-200

TI-2024-07311 CVE-2024-7888 · GHSA-32pm-mq37-w9xm

Classified Listing – Classified ads & Business Directory Plugin <= 3.1.7 - Missing Authorization

LOW 28

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions like export_forms(), import_forms(), up…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00292 Published 2024-09-13 No fix listed CWE-862

TI-2024-03633 CVE-2024-3893 · GHSA-6jqm-q264-hgq7

Missing authorization in RadiusTheme Classified Listing – AI-Powered Classified ads &…

LOW 20

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the rtcl_fb_gallery_image_delete AJAX action in all…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00362 Published 2024-04-25 No fix listed CWE-862

TI-2024-01260 CVE-2024-1352 · GHSA-vjgv-q4qp-fr6p

Classified Listing – Classified ads & Business Directory Plugin <= 3.0.4 - Missing Authorization

LOW 36

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on the rtcl_import_location() rtcl_im…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00547 Published 2024-04-09 No fix listed CWE-862

TI-2024-01224 CVE-2024-1315 · GHSA-fjjf-hfph-8mm9

Classified Listing <= 3.0.4 - Cross-Site Request Forgery to Account Takeover via rtcl_update_user_account

MEDIUM 40

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.4.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00452 Published 2024-04-09 No fix listed CWE-352

TI-2023-19008 CVE-2023-37387 · GHSA-qwm3-hm7h-76g3

WordPress Classified Listing Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme Classified Listing plugin <= 2.4.5 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00248 Published 2023-07-18 No fix listed CWE-352

TI-2022-02455 CVE-2022-2655 · GHSA-jvwh-h8w3-w6p4

Classified Listing Pro < 2.0.20 - Reflected Cross-Site Scripting

LOW 28

The Classified Listing Pro WordPress plugin before 2.0.20 does not escape a generated URL before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00701 Published 2022-09-16 Fixed in 2.0.20 CWE-79

TI-2022-02454 CVE-2022-2654 · GHSA-mcf6-w793-99gq

Classima < 2.1.11 - Reflected Cross-Site Scripting

MEDIUM 60

The Classima WordPress theme before 2.1.11 and some of its required plugins (Classified Listing before 2.2.14, Classified Listing Pro before 2.0.20, Classified Listing Store & Membership before 1.4.20 and Classima Core b…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00618 Published 2022-09-16 Fixed in 2.2.14, 2.0.20 +3 CWE-79

Vulnerabilities

Filters