WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
classified-listing
Published
2026-04-29
Title
Classified Listing – AI-Powered Classified ads & Business Directory Plugin < 5.3.9 - Unauthenticated Stored Cross-Site Scripting
Slug
classified-listing
Published
2026-05-14
Title
Classified Listing < 5.4.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via add_order_note and send_email_to_user_by_moderator AJAX Actions
Slug
classified-listing
Published
2026-05-17
Title
Classified Listing – AI-Powered Classified ads & Business Directory Plugin < 5.3.9 - Authenticated (Subscriber+) Arbitrary File Download
Slug
classified-listing
Published
2026-06-18
Title
Classified Listing < 5.4.3 - Missing Authorization to Authenticated (Subscriber+) Feature Modification via Multiple AJAX Handlers ('listingId'/'id' Parameters)
Slug
classified-listing
Published
2026-06-30
Title
Classified Listing < 5.3.9 - Subscriber+ Payment Receipt Disclosure via IDOR
Slug
classified-listing
Published
2026-06-29
Title
Classified Listing – AI-Powered Classified ads & Business Directory < 5.4.3 - Unauthenticated Stored Cross-Site Scripting
Slug
classified-listing
Published
2026-07-01
Title
Classified Listing – AI-Powered Classified ads & Business Directory < 5.4.3 - Missing Authorization
Slug
classified-listing
Published
2026-07-23
Title
Classified Listing < 5.4.4 - Contributor+ Unpublished Post Content Disclosure via rtcl_block_css_get_posts
Slug
classified-listing
Published
2026-07-23
Title
Classified Listing < 5.4.4 - Contributor+ Store Revenue Total Disclosure via rtcl_revenue_order_search
Slug
classified-listing
Published
2026-09-02
Title
Classified Listing – AI-Powered Classified ads & Business Directory <= 6.1.2 - Missing Authorization
Slug
classified-listing
Published
2026-09-02
Title
Classified Listing < 6.1.1 - Subscriber+ Arbitrary Attachment Deletion and Listing Image Tampering via IDOR
Slug
classified-listing-pro
Published
2022-08-22
Title
Classified Listing Pro < 2.0.20 - Reflected Cross-Site Scripting
Slug
classified-listing-pro
Published
2022-08-22
Title
Classima < 2.1.11 - Reflected Cross-Site Scripting
Slug
classified-listing-store
Published
2022-08-22
Title
Classima < 2.1.11 - Reflected Cross-Site Scripting
Slug
classima-core
Published
2022-08-22
Title
Classima < 2.1.11 - Reflected Cross-Site Scripting
Slug
classy-addons-for-elementor
Published
2024-10-31
Title
Classy Addons for Elementor <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
classyfrieds
Published
2021-04-10
Title
Classyfrieds <= 3.8 - Authenticated Arbitrary File Upload to RCE
Slug
clean-and-simple-contact-form-by-meg-nicholas
Published
2014-11-07
Title
Contact Form Clean & Simple <= 4.4.0 - Cross-Site Scripting (XSS)
Slug
clean-and-simple-contact-form-by-meg-nicholas
Published
2020-01-22
Title
Contact Form Clean and Simple < 4.7.1 - Authenticated Stored XSS
Slug
clean-contact
Published
2022-06-01
Title
Clean-Contact <= 1.6 - Arbitrary Settings Update to Stored XSS via CSRF
Slug
clean-login
Published
2017-05-05
Title
Clean Login < 1.8 - Change Redirect URL CSRF
Slug
clean-login
Published
2015-07-27
Title
Clean Login < 1.5.1 - Reflected XSS
Slug
clean-login
Published
2021-08-09
Title
Clean Login 1.12.6.3 - Reflected Cross-Site Scripting
Slug
clean-login
Published
2023-01-10
Title
Clean Login < 1.13.7 - Contributor+ Stored XSS via Shortcode
Slug
clean-login
Published
2024-08-29
Title
Clean Login < 1.14.6 - Authenticated (Contributor+) Local File Inclusion