Medium · 4.3 CVE-2026-111828 EUVD-2026-104323GHSA-r7h4-c665-888x

WordPress Classified Listing plugin <= 6.1.5 - Direct static code injection vulnerability

Published Oct 19, 2026 · Updated Oct 19, 2026 · Assigned by Patchstack

Vendor: Mamunur Rashid Product: Classified Listing

Description

Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.5.

Affected products

Vendor	Product	Affected	Fixed
Mamunur Rashid	Classified Listing	≤ 6.1.5	—

References

https://patchstack.com/database/wordpress/plugin/classified-listing/vulnerability/wordpress-classified-listing-plugin-6-1-5-direct-static-code-injection-vulnerability?_s_id=cve vdb-entry