UC
Product
Ultimate Classified Listings
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 4Low 0
Watch
Add Ultimate Classified Listings to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-13753 | 8.8 | Feb 20 | Ultimate Classified Listings <= 1.5 - Cross-Site Request Forgery to Account Takeover Affected: through 1.5 |
| CVE-2025-9874 | 7.5 | Sep 11 | Ultimate Classified Listings <= 1.6 - Authenticated (Contributor+) Local File Inclusion Affected: through 1.6 |
| CVE-2024-52448 | 7.5 | Nov 20 | WordPress Ultimate Classified Listings plugin <= 1.7 - Local File Inclusion vulnerability Affected: through 1.7 |
| CVE-2024-5882 | 7.5 | Jul 29 | The Ultimate Classified Listings WordPress plugin before 1.3 does not validate the `ucl_page` and `layout` parameters allowing unauthenticated users to access PHP files on the… Affected: before 1.3 |
| CVE-2024-6529 | 7.1 | Aug 1 | The Ultimate Classified Listings WordPress plugin before 1.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site… Affected: before 1.4 |
| CVE-2024-52487 | 6.5 | Dec 2 | WordPress Ultimate Classified Listings plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability Affected: through 1.7 |
| CVE-2024-13748 | 4.8 | Feb 20 | Ultimate Classified Listings <= 1.4 Authenticated (Administrator+) Stored Cross-Site Scripting via Title Parameter Affected: through 1.4 |
| CVE-2024-5883 | 4.7 | Jul 29 | The Ultimate Classified Listings WordPress plugin before 1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site… Affected: before 1.3 |
| CVE-2025-0763 | 4.3 | Sep 11 | Ultimate Classified Listings <= 1.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update Affected: through 1.7 |
Showing 9