WebCodingPlace

13 results · Clear filters · Feed

• High 7.5
  CVE-2026-15142

  Real Estate Manager Pro <= 12.8.6 - Authenticated (Subscriber+) Privilege Escalation via 'user_has_cap' Filter ID Collision

  The Real Estate Manager Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 12.8.6. This is due to improper capability handling in the allow_attachment_actions() function, which can treat a target user ID as a …

  WebCodingPlace Real Estate Manager Pro Web / CMS
  Aug 15, 2026
• High 7.1
  CVE-2026-57701

  WordPress Real Estate Manager Pro plugin <= 12.8.5 - Reflected Cross Site Scripting (XSS) vulnerability

  Unauthenticated Cross Site Scripting (XSS) in Real Estate Manager Pro <= 12.8.5 versions.

  WebCodingPlace Real Estate Manager Pro
  Jul 23, 2026
• High 7.1
  CVE-2026-57398

  WordPress Real Estate Manager Pro plugin <= 12.8.3 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebCodingPlace Real Estate Manager Pro real-estate-manager-pro allows Reflected XSS.This issue affects Real Estate Manager Pro: from n/a through <= 12.8.3.

  WebCodingPlace Real Estate Manager Pro
  Jul 13, 2026
• High 7.5
  CVE-2026-27361

  WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Broken Access Control vulnerability

  Missing Authorization vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Posts Carousel Pro: from n/a through <= 15.…

  WebCodingPlace Responsive Posts Carousel Pro
  Mar 5, 2026
• High 7.5
  CVE-2025-68552

  WordPress WooCommerce Coming Soon Product with Countdown plugin <= 5.0 - Local File Inclusion vulnerability

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebCodingPlace WooCommerce Coming Soon Product with Countdown woo-coming-soon-product allows PHP Local File Inclusion.This issue affects W…

  WebCodingPlace WooCommerce Coming Soon Product with Countdown Web / CMS
  Feb 20, 2026
• High 7.5
  CVE-2025-68996

  WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Local File Inclusion vulnerability

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows PHP Local File Inclusion.This issue affects Responsive P…

  WebCodingPlace Responsive Posts Carousel Pro
  Dec 30, 2025
• High 7.5
  CVE-2025-9874

  Ultimate Classified Listings <= 1.6 - Authenticated (Contributor+) Local File Inclusion

  The Ultimate Classified Listings plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6 via the 'uclwp_dashboard' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and ab…

  WebCodingPlace Ultimate Classified Listings Web / CMS
  Sep 11, 2025
• High 7.1
  CVE-2025-54032

  WordPress Real Estate Manager Pro Plugin <= 12.7.3 - Cross Site Scripting (XSS) Vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebCodingPlace Real Estate Manager Pro real-estate-manager-pro allows Reflected XSS.This issue affects Real Estate Manager Pro: from n/a through <= 12.7.3.

  WebCodingPlace Real Estate Manager Pro
  Aug 20, 2025
• High 7.5
  CVE-2025-52728

  WordPress Responsive Posts Carousel WordPress Plugin Plugin <= 15.0 - Local File Inclusion Vulnerability

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows PHP Local File Inclusion.This issue affects Responsive P…

  WebCodingPlace Responsive Posts Carousel Pro Web / CMS
  Aug 14, 2025
• High 8.1
  CVE-2024-13753

  Ultimate Classified Listings <= 1.5 - Cross-Site Request Forgery to Account Takeover

  The Ultimate Classified Listings plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to missing or incorrect nonce validation on the update_profile function. This makes it possible for unauth…

  WebCodingPlace Ultimate Classified Listings Web / CMS
  Feb 20, 2025
• High 7.5
  CVE-2024-56286

  WordPress Classic Addons – WPBakery Page Builder plugin <= 3.0 - Local File Inclusion vulnerability

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in webcodingplace Classic Addons – WPBakery Page Builder classic-addons-wpbakery-page-builder-addons allows PHP Local File Inclusion.This issue affects Classic Addons…

  WebCodingPlace Classic Addons – WPBakery Page Builder
  Jan 7, 2025
• High 7.5
  CVE-2024-11952

  Classic Addons – WPBakery Page Builder <= 3.0 - Authenticated (Contributor+) Limited Local PHP File Inclusion

  The Classic Addons – WPBakery Page Builder plugin for WordPress is vulnerable to Limited Local PHP File Inclusion in all versions up to, and including, 3.0 via the 'style' parameter. This makes it possible for authenticated attackers, with Contributor-level a…

  WebCodingPlace Classic Addons – WPBakery Page Builder Web / CMS
  Dec 4, 2024
• High 7.5
  CVE-2024-52448

  WordPress Ultimate Classified Listings plugin <= 1.7 - Local File Inclusion vulnerability

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in webcodingplace Ultimate Classified Listings ultimate-classified-listings allows PHP Local File Inclusion.This issue affects Ultimate Classified Listings: from n/a …

  WebCodingPlace Ultimate Classified Listings
  Nov 20, 2024