Skip to content
6.5 Medium

CVE-2024-1352 The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized…

Description

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on the rtcl_import_location() rtcl_import_category() functions in all versions up to, and including, 3.0.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to create terms.

Affected products and versions

Product Affected versions Fixed in
Classified Listing – Classified ads & Business Directory Plugin 3.0 earliest → 3.0.4 No fix stated
classified_listing_plugin 3.0 earliest → 3.0.4 No fix stated
Classified Listing – AI-Powered Classified ads & Business Directory Plugin 3.0 earliest → 3.0.4 No fix stated
The 6 CVEs of Classified Listing – Classified ads & Business Directory Plugin →
Track this CVE