4.3
Medium
CVE-2025-12953 The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to…
Description
The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the "rtcl_ajax_add_listing_type", "rtcl_ajax_update_listing_type", and "rtcl_ajax_delete_listing_type" function in all versions up to, and including, 5.2.0. This makes it possible for authenticated attackers, with subscriber level access and above, to add, update, or delete listing types.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Classified Listing – AI-Powered Classified ads & Business Directory Plugin 5.2 | earliest → 5.2.0 | No fix stated |
Other CVEs of Classified Listing – AI-Powered Classified ads & Business Directory Plugin
The 9 CVEs of Classified Listing – AI-Powered Classified ads & Business Directory Plugin →
CVE-2026-7563
The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to…
4.3
Medium
CVE-2025-7711
The The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to…
5.4
Medium
CVE-2025-1063
The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to Sensitive…
5.3
Medium
CVE-2024-11194
The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized…
8.8
High