Advisories · Technology

webcodingplace Ultimate Classified Listings.

Every CVE that names webcodingplace Ultimate Classified Listings among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-9874 CVE record

CVSS 7.5 High

Ultimate Classified Listings <= 1.6 - Authenticated (Contributor+) Local File Inclusion
- webcodingplace Ultimate Classified Listings
- File inclusion
Not analysed yet 11 Sept 2025
CVE-2025-0763 CVE record

CVSS 4.3 Medium

Ultimate Classified Listings <= 1.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update
- webcodingplace Ultimate Classified Listings
- Broken access control
Not analysed yet 11 Sept 2025
CVE-2024-13753 CVE record

CVSS 8.1 High

Ultimate Classified Listings <= 1.5 - Cross-Site Request Forgery to Account Takeover
- webcodingplace Ultimate Classified Listings
- Cross-site request forgery (CSRF)
Not analysed yet 20 Feb 2025
CVE-2024-13748 CVE record

CVSS 4.4 Medium

Ultimate Classified Listings <= 1.4 Authenticated (Administrator+) Stored Cross-Site Scripting via Title Parameter
- webcodingplace Ultimate Classified Listings
- Cross-site scripting (XSS)
Not analysed yet 20 Feb 2025
CVE-2024-52487 CVE record

CVSS 6.5 Medium

WordPress Ultimate Classified Listings plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability
- webcodingplace Ultimate Classified Listings
- Cross-site scripting (XSS)
Not analysed yet 2 Dec 2024
CVE-2024-52448 CVE record

CVSS 7.5 High

WordPress Ultimate Classified Listings plugin <= 1.7 - Local File Inclusion vulnerability
- webcodingplace Ultimate Classified Listings
- Path traversal
Not analysed yet 20 Nov 2024