Plugin icon

Classified Listing – AI-Powered Classified ads & Business Directory

classified-listing

Vulnerabilities:

26

Last Updated:

August 23, 2026

Active Installs:

9000

Published
Title
Fixed in
CVSS
Published
2026-07-23
Title
Classified Listing < 5.4.4 - Contributor+ Unpublished Post Content Disclosure via rtcl_block_css_get_posts
Fixed in
Fixed in 5.4.4
CVSS
2.7 (low)
Published
2026-07-23
Title
Classified Listing < 5.4.4 - Contributor+ Store Revenue Total Disclosure via rtcl_revenue_order_search
Fixed in
Fixed in 5.4.4
CVSS
2.7 (low)
Published
2026-07-01
Title
Classified Listing – AI-Powered Classified ads & Business Directory < 5.4.3 - Missing Authorization
Fixed in
Fixed in 5.4.3
CVSS
4.3 (medium)
Published
2026-06-30
Title
Classified Listing < 5.3.9 - Subscriber+ Payment Receipt Disclosure via IDOR
Fixed in
Fixed in 5.3.9
CVSS
4.3 (medium)
Published
2026-06-29
Title
Classified Listing – AI-Powered Classified ads & Business Directory < 5.4.3 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 5.4.3
CVSS
7.2 (high)
Published
2026-06-18
Title
Classified Listing < 5.4.3 - Missing Authorization to Authenticated (Subscriber+) Feature Modification via Multiple AJAX Handlers ('listingId'/'id' Parameters)
Fixed in
Fixed in 5.4.3
CVSS
4.3 (medium)
Published
2026-05-17
Title
Classified Listing – AI-Powered Classified ads & Business Directory Plugin < 5.3.9 - Authenticated (Subscriber+) Arbitrary File Download
Fixed in
Fixed in 5.3.9
CVSS
4.3 (medium)
Published
2026-05-14
Title
Classified Listing < 5.4.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via add_order_note and send_email_to_user_by_moderator AJAX Actions
Fixed in
Fixed in 5.4.0
CVSS
4.3 (medium)
Published
2026-04-29
Title
Classified Listing – AI-Powered Classified ads & Business Directory Plugin < 5.3.10 - Missing Authorization
Fixed in
Fixed in 5.3.10
CVSS
4.3 (medium)
Published
2026-04-29
Title
Classified Listing – AI-Powered Classified ads & Business Directory Plugin < 5.3.9 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 5.3.9
CVSS
7.2 (high)
Published
2026-04-29
Title
Classified Listing – AI-Powered Classified ads & Business Directory Plugin < 5.3.9 - Missing Authorization
Fixed in
Fixed in 5.3.9
CVSS
5.3 (medium)
Published
2026-02-23
Title
Classified Listing – AI-Powered Classified ads & Business Directory Plugin < 5.3.5 - Authenticated (Subscriber+) Sensitive Data Exposure
Fixed in
Fixed in 5.3.5
CVSS
4.3 (medium)
Published
2025-11-17
Title
Classified Listing – Classified ads & Business Directory Plugin < 5.0.4 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Listing Description
Fixed in
Fixed in 5.0.4
CVSS
5.4 (medium)
Published
2025-11-10
Title
Classified Listing – AI-Powered Classified ads & Business Directory Plugin < 5.2.1 - Missing Authorization to Authenticated (Subscriber+) Listing Types Tampering
Fixed in
Fixed in 5.2.1
CVSS
4.3 (medium)
Published
2025-09-03
Title
Classified Listing < 5.0.7 - Missing Authorization
Fixed in
Fixed in 5.0.7
CVSS
4.3 (medium)
Published
2025-07-30
Title
Classified Listing < 5.0.1 - Authenticated (Contributor+) Content Injection
Fixed in
Fixed in 5.0.1
CVSS
4.3 (medium)
Published
2025-06-19
Title
Classified Listing < 4.2.1 - Authenticated (Contributor+) Local File Inclusion
Fixed in
Fixed in 4.2.1
CVSS
8.8 (high)
Published
2025-02-24
Title
Classified Listing – Classified ads & Business Directory Plugin < 4.0.5 - Unauthenticated Settings Exposure
Fixed in
Fixed in 4.0.5
CVSS
5.3 (medium)
Published
2024-11-18
Title
Classified Listing – Classified ads & Business Directory Plugin < 3.1.16 - Authenticated (Subscriber+) Limited Arbitrary Option Update
Fixed in
Fixed in 3.1.16
CVSS
8.8 (high)
Published
2024-11-11
Title
Classified Listing < 3.1.17 - Authenticated (Contributor+) Local File Inclusion
Fixed in
Fixed in 3.1.17
CVSS
8.8 (high)
Published
2024-09-12
Title
Classified Listing – Classified ads & Business Directory Plugin < 3.1.8 - Missing Authorization
Fixed in
Fixed in 3.1.8
CVSS
6.3 (medium)
Published
2024-04-24
Title
Classified Listing – Classified ads & Business Directory Plugin < 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion
Fixed in
Fixed in 3.0.11
CVSS
5.3 (medium)
Published
2024-04-04
Title
Classified Listing – Classified ads & Business Directory Plugin < 3.0.5 - Missing Authorization
Fixed in
Fixed in 3.0.5
CVSS
6.5 (medium)
Published
2024-04-04
Title
Classified Listing < 3.0.5 - Cross-Site Request Forgery to Account Takeover via rtcl_update_user_account
Fixed in
Fixed in 3.0.5
CVSS
8.8 (high)
Published
2023-07-05
Title
Classified Listing < 2.4.6 - Cross-Site Request Forgery
Fixed in
Fixed in 2.4.6
CVSS
5.4 (medium)
Published
2022-08-22
Title
Classima < 2.1.11 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.2.14
CVSS
6.1 (medium)