Skip to content
OpenAdvisories

Product · WebCodingPlace

Ultimate Classified Listings

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2025-9874

    Ultimate Classified Listings <= 1.6 - Authenticated (Contributor+) Local File Inclusion

    The Ultimate Classified Listings plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6 via the 'uclwp_dashboard' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and ab…

    WebCodingPlace Ultimate Classified Listings Web / CMS
  • High 8.1
    CVE-2024-13753

    Ultimate Classified Listings <= 1.5 - Cross-Site Request Forgery to Account Takeover

    The Ultimate Classified Listings plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to missing or incorrect nonce validation on the update_profile function. This makes it possible for unauth…

    WebCodingPlace Ultimate Classified Listings Web / CMS
  • High 7.5
    CVE-2024-52448

    WordPress Ultimate Classified Listings plugin <= 1.7 - Local File Inclusion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in webcodingplace Ultimate Classified Listings ultimate-classified-listings allows PHP Local File Inclusion.This issue affects Ultimate Classified Listings: from n/a …

    WebCodingPlace Ultimate Classified Listings