Classified Listing vulnerabilities
We track 1 vulnerability in Classified Listing products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 4, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Classified Listing vulnerabilities
- 7.1 High severity
Classified Listing: Authorization Bypass Through User-Controlled Key
The Classified Listing WordPress plugin before 6.1.1 does not verify that the caller owns or can edit the target listing before its AI image-editing AJAX action deletes or attaches media, allowing any authenticated user, including a subscriber, to permanently