Lucene search
+L

294 matches found

NVD
NVD
•added 2026/10/19 2:17 p.m.•6 views

CVE-2026-111828

Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.5...

4.3CVSS0.00215EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/19 1:29 p.m.•7 views

EUVD-2026-104323

Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.5...

4.3CVSS5.8AI score0.00215EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/19 1:29 p.m.•36 views

CVE-2026-111828 WordPress Classified Listing plugin <= 6.1.5 - Direct static code injection vulnerability

Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.5...

4.3CVSS0.00215EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/19 1:29 p.m.•10 views

CVE-2026-111828

The WordPress Classified Listing plugin (versions

4.3CVSS5.8AI score0.00215EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/19 1:28 p.m.•11 views

WordPress Classified Listing plugin <= 6.1.5 - Direct static code injection vulnerability

Direct static code injection vulnerability discovered by changsheng in WordPress Plugin Classified Listing versions = 6.1.5...

4.3CVSS5.9AI score0.00215EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/19 12:00 a.m.•6 views

CVE-2026-111828: Improper Validation of Specified Quantity in Input

Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.5...

4.3CVSS5.8AI score0.00215EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/10/14 12:42 p.m.•10 views

WordPress Classified Listing plugin < 6.1.1 - Subscriber+ Unattached Media Deletion and Modification vulnerability

Subscriber+ Unattached Media Deletion and Modification vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Classified Listing versions 6.1.1...

5.8AI score0.00251EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/10/14 7:17 a.m.•12 views

CVE-2026-106646

The Classified Listing WordPress plugin before 6.1.1 does not verify that the requester owns or can edit the target listing when a gallery request references an unattached media item, allowing any authenticated user with a subscriber-level account to modify, corrupt or delete media-library...

5.9CVSS0.00251EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/14 6:00 a.m.•10 views

EUVD-2026-100885

The Classified Listing WordPress plugin before 6.1.1 does not verify that the requester owns or can edit the target listing when a gallery request references an unattached media item, allowing any authenticated user with a subscriber-level account to modify, corrupt or delete media-library...

5.9CVSS5.8AI score0.00251EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/14 6:00 a.m.•18 views

CVE-2026-106646

The Classified Listing WordPress plugin (versions before 6.1.1 ) contains a vulnerability where it fails to verify requester ownership or editing permissions for target listings when a gallery request references an unattached media item . This flaw allows any authenticated user with a subscriber-...

5.8AI score0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/14 6:00 a.m.•30 views

CVE-2026-106646 Classified Listing < 6.1.1 - Subscriber+ Unattached Media Deletion and Modification via Gallery AJAX Handlers

The Classified Listing WordPress plugin before 6.1.1 does not verify that the requester owns or can edit the target listing when a gallery request references an unattached media item, allowing any authenticated user with a subscriber-level account to modify, corrupt or delete media-library...

0.00251EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•7 views

CVE-2026-106646: Missing Authorization

The Classified Listing WordPress plugin before 6.1.1 does not verify that the requester owns or can edit the target listing when a gallery request references an unattached media item, allowing any authenticated user with a subscriber-level account to modify, corrupt or delete media-library...

5.9CVSS5.8AI score0.00251EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•14 views

PT-2026-113664

The Classified Listing WordPress plugin before 6.1.1 does not verify that the requester owns or can edit the target listing when a gallery request references an unattached media item, allowing any authenticated user with a subscriber-level account to modify, corrupt or delete media-library...

5.8AI score0.00251EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/09 10:16 a.m.•13 views

CVE-2026-94665

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mamunur Rashid Classified Listing classified-listing allows Stored XSS.This issue affects Classified Listing: from n/a through 6.1.2...

6.5CVSS0.00156EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/09 10:00 a.m.•27 views

CVE-2026-94665

The Mamunur Rashid Classified Listing WordPress plugin (versions

6.5CVSS5.7AI score0.00156EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/09 10:00 a.m.•52 views

CVE-2026-94665 WordPress Classified Listing plugin <= 6.1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mamunur Rashid Classified Listing classified-listing allows Stored XSS.This issue affects Classified Listing: from n/a through 6.1.2...

6.5CVSS0.00156EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/09 10:00 a.m.•13 views

EUVD-2026-95620

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mamunur Rashid Classified Listing classified-listing allows Stored XSS.This issue affects Classified Listing: from n/a through 6.1.2...

6.5CVSS5.7AI score0.00156EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/09 12:00 a.m.•7 views

CVE-2026-94665: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mamunur Rashid Classified Listing classified-listing allows Stored XSS.This issue affects Classified Listing: from n/a through 6.1.2...

6.5CVSS5.7AI score0.00156EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/09 12:00 a.m.•12 views

PT-2026-108834

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mamunur Rashid Classified Listing classified-listing allows Stored XSS.This issue affects Classified Listing: from n/a through 6.1.2...

6.5CVSS5.7AI score0.00156EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/10/04 7:32 a.m.•17 views

WordPress Classified Listing plugin <= 6.1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Zein in WordPress Plugin Classified Listing versions = 6.1.2...

5.7AI score0.00156EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder