4.3
Medium
CVE-2024-3893 The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized…
Description
The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the rtcl_fb_gallery_image_delete AJAX action in all versions up to, and including, 3.0.10.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary attachements.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Classified Listing – Classified ads & Business Directory Plugin 3.0 | earliest → 3.0.10.3 | No fix stated |
| classified_listing_plugin | Versions not published | |
| Classified Listing – AI-Powered Classified ads & Business Directory Plugin 3.0 | earliest → 3.0.10.3 | No fix stated |
Other CVEs of Classified Listing – Classified ads & Business Directory Plugin
The 6 CVEs of Classified Listing – Classified ads & Business Directory Plugin →
CVE-2025-1063
The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to Sensitive…
5.3
Medium
CVE-2024-11194
The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized…
8.8
High
CVE-2024-7888
The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized…
6.3
Medium
CVE-2024-1352
The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized…
6.5
Medium