CVE-2026-94665

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mamunur Rashid Classified Listing classified-listing allows Stored XSS.This issue affects Classified Listing: from n/a through 6.1.2...

CVE-2026-94665 WordPress Classified Listing plugin <= 6.1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mamunur Rashid Classified Listing classified-listing allows Stored XSS.This issue affects Classified Listing: from n/a through 6.1.2...

CVE-2026-94665

The Mamunur Rashid Classified Listing WordPress plugin (versions

EUVD-2026-95620

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mamunur Rashid Classified Listing classified-listing allows Stored XSS.This issue affects Classified Listing: from n/a through 6.1.2...

PT-2026-108834

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mamunur Rashid Classified Listing classified-listing allows Stored XSS.This issue affects Classified Listing: from n/a through 6.1.2...

WordPress Classified Listing plugin <= 6.1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Zein in WordPress Plugin Classified Listing versions = 6.1.2...

CVE-2026-96351

Unauthenticated Cross Site Scripting XSS in Classified Listing = 6.1.3 versions...

CVE-2026-96351 WordPress Classified Listing plugin <= 6.1.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Classified Listing = 6.1.3 versions...

CVE-2026-96351 WordPress Classified Listing plugin <= 6.1.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Classified Listing = 6.1.3 versions...

EUVD-2026-89864

Unauthenticated Cross Site Scripting XSS in Classified Listing = 6.1.3 versions...

CVE-2026-96351

The Classified Listing WordPress plugin, versions

CVE-2026-96351: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Classified Listing = 6.1.3 versions...

PT-2026-103196

Unauthenticated Cross Site Scripting XSS in Classified Listing = 6.1.3 versions...

WordPress Classified Listing plugin <= 6.1.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by manop55555 in WordPress Plugin Classified Listing versions = 6.1.3...

WordPress Classified Listing plugin < 6.1.1 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Usama Arshad in WordPress Plugin Classified Listing versions 6.1.1...

CVE-2026-16281

The Classified Listing WordPress plugin before 6.1.1 does not verify that the caller owns or can edit the target listing before its AI image-editing AJAX action deletes or attaches media, allowing any authenticated user, including a subscriber, to permanently delete attachments from, and attach...

CVE-2026-16281

The Classified Listing WordPress plugin (versions before 6.1.1 ) is vulnerable to an Insecure Direct Object Reference (IDOR) . The plugin fails to verify if a caller owns or has permission to edit a target listing before executing its AI image-editing AJAX action . This allows any authenticated u...

EUVD-2026-70900

The Classified Listing WordPress plugin before 6.1.1 does not verify that the caller owns or can edit the target listing before its AI image-editing AJAX action deletes or attaches media, allowing any authenticated user, including a subscriber, to permanently delete attachments from, and attach...

CVE-2026-16281 Classified Listing < 6.1.1 - Subscriber+ Arbitrary Attachment Deletion and Listing Image Tampering via IDOR

The Classified Listing WordPress plugin before 6.1.1 does not verify that the caller owns or can edit the target listing before its AI image-editing AJAX action deletes or attaches media, allowing any authenticated user, including a subscriber, to permanently delete attachments from, and attach...

CVE-2026-16281 Classified Listing < 6.1.1 - Subscriber+ Arbitrary Attachment Deletion and Listing Image Tampering via IDOR

The Classified Listing WordPress plugin before 6.1.1 does not verify that the caller owns or can edit the target listing before its AI image-editing AJAX action deletes or attaches media, allowing any authenticated user, including a subscriber, to permanently delete attachments from, and attach...