Skip to content
6.3 Medium

CVE-2024-7888 The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized…

Description

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions like export_forms(), import_forms(), update_fb_options(), and many more in all versions up to, and including, 3.1.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify forms and various other settings.

Affected products and versions

Product Affected versions Fixed in
Classified Listing – Classified ads & Business Directory Plugin 3.1 earliest → 3.1.7 No fix stated
Classified Listing – AI-Powered Classified ads & Business Directory Plugin 3.1 earliest → 3.1.7 No fix stated
The 6 CVEs of Classified Listing – Classified ads & Business Directory Plugin →
Track this CVE