Skip to content
OpenAdvisories

Vendor

techlabpro1

20 known vulnerabilities.

Products

Classified Listing – AI-Powered Classified ads & Business Directory Plugin 9 The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid 3 Review Schema – Review & Structure Data Schema Plugin 2 Team – Team Members Showcase Plugin 2 Classified Listing – AI-Powered Classified ads & Business Directory 1 Food Menu – Restaurant Menu & Online Ordering for WooCommerce 1 Radius Blocks – WordPress Gutenberg Blocks 1 Widget for Google Reviews 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2025-7327

    Widget for Google Reviews <= 1.0.15 - Authenticated (Subscriber+) Directory Traversal to Local File Inclusion

    The Widget for Google Reviews plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.0.15 via the layout parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inclu…

    techlabpro1 Widget for Google Reviews Web / CMS
  • High 8.8
    CVE-2025-1707

    Review Schema <= 2.2.4 - Authenticated (Contributor+) Local File Inclusion via Post Meta

    The Review Schema plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.4 via post meta. This makes it possible for authenticated attackers, with contributor-level and above permissions, to include and execute ar…

    techlabpro1 Review Schema – Review & Structure Data Schema Plugin Web / CMS
  • High 8.8
    CVE-2024-11194

    Classified Listing – Classified ads & Business Directory Plugin <= 3.1.15.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update

    The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a misconfigured check on the 'rtcl_import_settings' function in all versio…

    techlabpro1 Classified Listing – AI-Powered Classified ads & Business Directory Plugin Web / CMS
  • High 8.8
    CVE-2024-1315

    Classified Listing <= 3.0.4 - Cross-Site Request Forgery to Account Takeover via rtcl_update_user_account

    The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.4. This is due to missing or incorrect nonce validation on the 'rtcl_update_user_acc…

    techlabpro1 Classified Listing – AI-Powered Classified ads & Business Directory Plugin Web / CMS