Advisories · Technology
techlabpro1 Classified Listing – AI-Powered Classified ads & Business Directory Plugin.
Every CVE that names techlabpro1 Classified Listing – AI-Powered Classified ads & Business Directory Plugin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Classified Listing <= 5.3.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via add_order_note and send_email_to_user_by_moderator AJAX Actions
- techlabpro1 Classified Listing – AI-Powered Classified ads & Business Directory Plugin
- Broken access control
- CVSS 5.4 Medium
Classified Listing – Classified ads & Business Directory Plugin <= 5.0.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Listing Description
- techlabpro1 Classified Listing – AI-Powered Classified ads & Business Directory Plugin
- Code injection
- CVSS 4.3 Medium
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.2.0 - Missing Authorization to Authenticated (Subscriber+) Listing Types Tampering
- techlabpro1 Classified Listing – AI-Powered Classified ads & Business Directory Plugin
- Broken access control
- CVSS 5.3 Medium
Classified Listing – Classified ads & Business Directory Plugin <= 4.0.4 - Unauthenticated Settings Exposure
- techlabpro1 Classified Listing – AI-Powered Classified ads & Business Directory Plugin
- Information disclosure
- CVSS 8.8 High
Classified Listing – Classified ads & Business Directory Plugin <= 3.1.15.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update
- techlabpro1 Classified Listing – AI-Powered Classified ads & Business Directory Plugin
- Broken access control
- CVSS 6.3 Medium
Classified Listing – Classified ads & Business Directory Plugin <= 3.1.7 - Missing Authorization
- techlabpro1 Classified Listing – AI-Powered Classified ads & Business Directory Plugin
- Broken access control
- CVSS 4.3 Medium
Classified Listing – Classified ads & Business Directory Plugin <= 3.0.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion
- techlabpro1 Classified Listing – AI-Powered Classified ads & Business Directory Plugin
- Broken access control
- CVSS 6.5 Medium
Classified Listing – Classified ads & Business Directory Plugin <= 3.0.4 - Missing Authorization
- techlabpro1 Classified Listing – AI-Powered Classified ads & Business Directory Plugin
- Broken access control
- CVSS 8.8 High
Classified Listing <= 3.0.4 - Cross-Site Request Forgery to Account Takeover via rtcl_update_user_account
- techlabpro1 Classified Listing – AI-Powered Classified ads & Business Directory Plugin
- Cross-site request forgery (CSRF)