WordPress plugin
Classified Listing – AI-Powered Classified ads & Business Directory security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 33 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High8
- Medium25
- Low0
All Classified Listing – AI-Powered Classified ads & Business Directory vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Authenticated (Subscriber+) Arbitrary PHP Code Execution ≤6.1.5Update to 6.2.0 | CVE-2026-111828 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤6.1.3Update to 6.1.5 | CVE-2026-96351 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤5.4.2Update to 5.4.3 | CVE-2026-57344 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤5.3.8Update to 5.3.9 | CVE-2026-42658 | |
| High8.8 | Authenticated (Contributor+) Local File Inclusion ≤4.2.0Update to 4.2.1 | CVE-2025-52715 | |
| High8.8 | Authenticated (Subscriber+) Limited Arbitrary Option Update ≤3.1.15.1Update to 3.1.16 | CVE-2024-11194 | |
| High8.8 | Authenticated (Contributor+) Local File Inclusion ≤3.1.16Update to 3.1.17 | CVE-2024-52386 | |
| High8.8 | Cross-Site Request Forgery to Account Takeover via rtcl_update_user_account ≤3.0.4Update to 3.0.5 | CVE-2024-1315 |
- High8.8Authenticated (Subscriber+) Arbitrary PHP Code Execution
≤6.1.5Update to 6.2.0
- High7.2Unauthenticated Stored Cross-Site Scripting
≤6.1.3Update to 6.1.5
- High7.2Unauthenticated Stored Cross-Site Scripting
≤5.4.2Update to 5.4.3
- High7.2Unauthenticated Stored Cross-Site Scripting
≤5.3.8Update to 5.3.9
- High8.8Authenticated (Contributor+) Local File Inclusion
≤4.2.0Update to 4.2.1
- High8.8Authenticated (Subscriber+) Limited Arbitrary Option Update
≤3.1.15.1Update to 3.1.16
- High8.8Authenticated (Contributor+) Local File Inclusion
≤3.1.16Update to 3.1.17
- High8.8Cross-Site Request Forgery to Account Takeover via rtcl_update_user_account
≤3.0.4Update to 3.0.5
Classified Listing – AI-Powered Classified ads & Business Directory: common questions
Does Classified Listing – AI-Powered Classified ads & Business Directory have known vulnerabilities?
Yes. VulnCrest Radar lists 33 known vulnerabilities in Classified Listing – AI-Powered Classified ads & Business Directory: 8 high, 25 medium. None are known to affect version null.
How do I check which version of Classified Listing – AI-Powered Classified ads & Business Directory I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Classified Listing – AI-Powered Classified ads & Business Directory vulnerability?
CVE-2026-111828, published Oct 19, 2026: Classified Listing – AI-Powered Classified ads & Business Directory <= 6.1.5 - Authenticated (Subscriber+) Arbitrary PHP Code Execution. Severity: High (CVSS 8.8).
Is any Classified Listing – AI-Powered Classified ads & Business Directory vulnerability listed in CISA KEV?
No. None of the known Classified Listing – AI-Powered Classified ads & Business Directory vulnerabilities is currently listed in the CISA KEV catalog.