Techlabpro1 vulnerabilities
We track 4 vulnerabilities in Techlabpro1 products across 4 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on July 8, 2025.
Latest Techlabpro1 vulnerabilities
- 8.8 High severity
Widget for Google Reviews: Improper Control of Filename for Include/Require Statement in PHP Program
The Widget for Google Reviews plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.0.15 via the layout parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to includ
- 8.8 High severity
Review Schema – Review & Structure Data Schema…: Improper Control of Filename for Include/Require Statement in PHP Program
The Review Schema plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.4 via post meta. This makes it possible for authenticated attackers, with contributor-level and above permissions, to include and execute arb
- 8.8 High severity
Classified Listing – AI-Powered Classified ads…: Missing Authorization
The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a misconfigured check on the 'rtcl_import_settings' function in all version
- 8.8 High severity
Classified Listing – AI-Powered Classified ads…: Cross-Site Request Forgery
The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.4. This is due to missing or incorrect nonce validation on the 'rtcl_update_user_acco