Description
Unauthenticated Broken Access Control in Classified Listing <= 5.3.8 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mamunur Rashid | Classified Listing | ≤ 5.3.8 | — |
Medium · 6.5
CVE-2026-42640
EUVD-2026-36816GHSA-3w93-f425-v54j
WordPress Classified Listing plugin <= 5.3.8 - Broken Access Control vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack