Classified Listing
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:classified_listing:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Classified Listing (6355fbaa-5fdd-502d-84a2-a74798c7efa6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-16274 |
vulnerable | 2026-09-16 04:32:57.145984 |
Classified Listing < 5.4.4 - Contributor+ Unpublished Post Content Disclosure via rtcl_block_css_get_posts
The Classified Listing WordPress plugin before 5.4.4 does not perform a capability or ownership check on an AJAX action that returns a post's content, allowing users with contributor-level access and above to read the content of any post, page, or custom post type on the site — including drafts, pending, and private posts owned by other users — regardless of ownership.
Published: 2026-08-03T06:00:10.403Z
Updated: 2026-08-04T17:41:58.702Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16276 |
vulnerable | 2026-09-16 04:32:56.489383 |
Classified Listing < 5.4.4 - Contributor+ Store Revenue Total Disclosure via rtcl_revenue_order_search
The Classified Listing WordPress plugin before 5.4.4 does not perform a capability check on an AJAX action that returns aggregated store revenue totals, allowing users with contributor-level access and above to read daily revenue figures normally restricted to administrators and report managers.
Published: 2026-08-03T06:00:10.605Z
Updated: 2026-08-04T17:41:52.700Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-14183 |
vulnerable | 2026-07-29 00:26:16.850607 |
Classified Listing < 5.3.9 - Subscriber+ Payment Receipt Disclosure via IDOR
The Classified Listing WordPress plugin before 5.3.9 does not verify that the order targeted by its payment-receipt handler belongs to the requesting user, allowing authenticated users with subscriber-level access to read the payment receipt details of any other user's order.
Published: 2026-07-21T06:00:01.726Z
Updated: 2026-07-21T15:23:43.105Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.