Classified Listing – AI-Powered Classified ads & Business Directory

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Classified Listing – AI-Powered Classified ads & Business Directory

Information

Software Type Plugin
Software Slug classified-listing (view on wordpress.org)
Software Status Active
Software Author techlabpro1
Software Website radiustheme.com
Software Downloads 660,204
Software Active Installs 9,000
Software Record Last Updated July 21, 2026

Showing 1-20 of 23 Vulnerabilities

Submit a Vulnerability
Classified Listing – AI-Powered Classified ads & Business Directory <= 5.4.2 - Missing Authorization
4.3
CVE-2026-57355
Jul 1, 2026
Researcher: Septio Noerdiansyah
Classified Listing – AI-Powered Classified ads & Business Directory <= 5.4.2 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2026-57344
Jun 29, 2026
Researcher: daroo
Classified Listing <= 5.4.2 - Missing Authorization to Authenticated (Subscriber+) Feature Modification via Multiple AJAX Handlers ('listingId'/'id' Parameters)
4.3
CVE-2026-10779
Jun 18, 2026
Researcher: Ben Tamam (Ben Tamam)
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Authenticated (Subscriber+) Arbitrary File Download
4.3
CVE-2026-42679
May 17, 2026
Researcher: thevietronin
Classified Listing <= 5.3.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via add_order_note and send_email_to_user_by_moderator AJAX Actions
4.3
CVE-2026-7563
May 14, 2026
Researcher: momopon1415
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Missing Authorization
5.3
CVE-2026-42640
Apr 29, 2026
Researcher: Cruzer
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.9 - Missing Authorization
4.3
CVE-2026-42651
Apr 29, 2026
Researcher: Jakub Herman
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2026-42658
Apr 29, 2026
Researcher: endy
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.4 - Authenticated (Subscriber+) Sensitive Data Exposure
4.3
CVE-2026-23546
Feb 23, 2026
Researcher: daroo
Classified Listing – Classified ads & Business Directory Plugin <= 5.0.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Listing Description
5.4
CVE-2025-7711
Nov 17, 2025
Researcher: Kishan Vyas
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.2.0 - Missing Authorization to Authenticated (Subscriber+) Listing Types Tampering
4.3
CVE-2025-12953
Nov 10, 2025
Researcher: Rafshanzani Suhada
Classified Listing <= 5.0.6 - Missing Authorization
4.3
CVE-2025-58601
Sep 3, 2025
Researcher: Denver Jackson
Classified Listing <= 5.0.0 - Authenticated (Contributor+) Content Injection
4.3
CVE-2025-54698
Jul 30, 2025
Researcher: Denver Jackson
Classified Listing – Classified ads & Business Directory Plugin <= 4.0.4 - Unauthenticated Settings Exposure
5.3
CVE-2025-1063
Feb 24, 2025
Researcher: wesley (wcraft)
Classified Listing – Classified ads & Business Directory Plugin <= 3.1.15.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update
8.8
CVE-2024-11194
Nov 18, 2024
Researcher: vgo0
Classified Listing <= 3.1.16 - Authenticated (Contributor+) Local File Inclusion
8.8
CVE-2024-52386
Nov 11, 2024
Researcher: João Pedro Soares de Alcântara
Classified Listing – Classified ads & Business Directory Plugin <= 4.0.1 - Reflected Cross-Site Scripting
6.1
CVE-2025-24745
Oct 27, 2024
Researcher: Le Ngoc Anh
Classified Listing – Classified ads & Business Directory Plugin <= 3.1.7 - Missing Authorization
6.3
CVE-2024-7888
Sep 12, 2024
Researcher: Lucio Sá
Classified Listing – Classified ads & Business Directory Plugin <= 3.0.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion
4.3
CVE-2024-3893
Apr 24, 2024
Researcher: Lucio Sá
Classified Listing – Classified ads & Business Directory Plugin <= 3.0.4 - Missing Authorization
6.5
CVE-2024-1352
Apr 4, 2024
Researcher: Francesco Carlucci
Title Status CVE ID CVSS Researchers Date
Classified Listing – AI-Powered Classified ads & Business Directory <= 5.4.2 - Missing Authorization Patched CVE-2026-57355 4.3 Septio Noerdiansyah July 1, 2026
Classified Listing – AI-Powered Classified ads & Business Directory <= 5.4.2 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2026-57344 7.2 daroo June 29, 2026
Classified Listing <= 5.4.2 - Missing Authorization to Authenticated (Subscriber+) Feature Modification via Multiple AJAX Handlers ('listingId'/'id' Parameters) Patched CVE-2026-10779 4.3 Ben Tamam (Ben Tamam) June 18, 2026
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Authenticated (Subscriber+) Arbitrary File Download Patched CVE-2026-42679 4.3 thevietronin May 17, 2026
Classified Listing <= 5.3.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via add_order_note and send_email_to_user_by_moderator AJAX Actions Patched CVE-2026-7563 4.3 momopon1415 May 14, 2026
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Missing Authorization Patched CVE-2026-42640 5.3 Cruzer April 29, 2026
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.9 - Missing Authorization Patched CVE-2026-42651 4.3 Jakub Herman April 29, 2026
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2026-42658 7.2 endy April 29, 2026
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.4 - Authenticated (Subscriber+) Sensitive Data Exposure Patched CVE-2026-23546 4.3 daroo February 23, 2026
Classified Listing – Classified ads & Business Directory Plugin <= 5.0.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Listing Description Patched CVE-2025-7711 5.4 Kishan Vyas November 17, 2025
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.2.0 - Missing Authorization to Authenticated (Subscriber+) Listing Types Tampering Patched CVE-2025-12953 4.3 Rafshanzani Suhada November 10, 2025
Classified Listing <= 5.0.6 - Missing Authorization Patched CVE-2025-58601 4.3 Denver Jackson September 3, 2025
Classified Listing <= 5.0.0 - Authenticated (Contributor+) Content Injection Patched CVE-2025-54698 4.3 Denver Jackson July 30, 2025
Classified Listing – Classified ads & Business Directory Plugin <= 4.0.4 - Unauthenticated Settings Exposure Patched CVE-2025-1063 5.3 wesley (wcraft) February 24, 2025
Classified Listing – Classified ads & Business Directory Plugin <= 3.1.15.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update Patched CVE-2024-11194 8.8 vgo0 November 18, 2024
Classified Listing <= 3.1.16 - Authenticated (Contributor+) Local File Inclusion Patched CVE-2024-52386 8.8 João Pedro Soares de Alcântara November 11, 2024
Classified Listing – Classified ads & Business Directory Plugin <= 4.0.1 - Reflected Cross-Site Scripting Patched CVE-2025-24745 6.1 Le Ngoc Anh October 27, 2024
Classified Listing – Classified ads & Business Directory Plugin <= 3.1.7 - Missing Authorization Patched CVE-2024-7888 6.3 Lucio Sá September 12, 2024
Classified Listing – Classified ads & Business Directory Plugin <= 3.0.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion Patched CVE-2024-3893 4.3 Lucio Sá April 24, 2024
Classified Listing – Classified ads & Business Directory Plugin <= 3.0.4 - Missing Authorization Patched CVE-2024-1352 6.5 Francesco Carlucci April 4, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation