Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-14183 1 Wordpress-extensions 1 Classified Listing 2026-11-10 4.3 Medium
The Classified Listing WordPress plugin before 5.3.9 does not verify that the order targeted by its payment-receipt handler belongs to the requesting user, allowing authenticated users with subscriber-level access to read the payment receipt details of any other user's order.
CVE-2026-111828 2 Mamunur Rashid, Wordpress-extensions 2 Classified Listing, Classified Listing 2026-10-21 4.3 Medium
Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.5.