Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Plugin security history

Classified Listing – AI-Powered Classified ads & Business Directory Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 25 vulnerability records associated with Classified Listing – AI-Powered Classified ads & Business Directory, published between 2022 and 2026.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

25Total records
0Critical
6High
19Medium
0Low
0Informational
25Patched records
0Currently marked unpatched
2022-08-22First disclosure
2026-07-01Latest disclosure
25 of 25CVE coverage

Use this history

Check and watch Classified Listing – AI-Powered Classified ads & Business Directory.

A history record does not establish whether the version installed on your website is affected. Enter the exact version in the checker, or add this software to a private Critical/High alert watchlist.

Check my installed versionWatch Classified Listing – AI-Powered Classified ads & Business Directory

Year-by-Year Timeline

YearRecordsRelative volume
202211 records
202311 records
202477 records
202566 records
20261010 records

Severity Breakdown

SeverityRecordsShare
High624%
Medium1976%

Vulnerability-Type Breakdown

Missing Authorization

13 records52%

First: 2024. Latest: 2026.

Cross-Site Scripting

4 records16%

First: 2022. Latest: 2026.

Other

3 records12%

First: 2024. Latest: 2025.

CSRF

2 records8%

First: 2023. Latest: 2024.

Information Disclosure

2 records8%

First: 2025. Latest: 2026.

Path Traversal

1 record4%

First: 2026. Latest: 2026.

Patch Status

Patched
25
Currently marked unpatched
0
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 5.3.9
  • 5.4.3
  • 5.4.0
  • 5.3.10
  • 5.3.5
  • 5.0.4
  • 5.2.1
  • 5.0.7
  • 5.0.1
  • 4.2.1
  • 4.0.5
  • 3.1.16
  • 3.1.17
  • 4.0.2
  • 3.1.8
  • 3.0.11
  • 3.0.5
  • 2.4.6
  • 2.2.14

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
*-5.4.2Classified Listing – AI-Powered Classified ads & Business Directory <= 5.4.2 - Missing AuthorizationJuly 1, 20265.4.3Medium
*-5.3.8Classified Listing <= 5.3.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) Receipt DisclosureJune 30, 20265.3.9Medium
*-5.4.2Classified Listing – AI-Powered Classified ads & Business Directory <= 5.4.2 - Unauthenticated Stored Cross-Site ScriptingJune 29, 20265.4.3High
*-5.4.2Classified Listing <= 5.4.2 - Missing Authorization to Authenticated (Subscriber+) Feature Modification via Multiple AJAX Handlers ('listingId'/'id' Parameters)June 18, 20265.4.3Medium
*-5.3.8Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Authenticated (Subscriber+) Arbitrary File DownloadMay 17, 20265.3.9Medium
*-5.3.10Classified Listing <= 5.3.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via add_order_note and send_email_to_user_by_moderator AJAX ActionsMay 14, 20265.4.0Medium
*-5.3.8Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Unauthenticated Stored Cross-Site ScriptingApril 29, 20265.3.9High
*-5.3.8Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Missing AuthorizationApril 29, 20265.3.9Medium
*-5.3.9Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.9 - Missing AuthorizationApril 29, 20265.3.10Medium
*-5.3.4Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.4 - Authenticated (Subscriber+) Sensitive Data ExposureFebruary 23, 20265.3.5Medium
*-5.0.3Classified Listing – Classified ads & Business Directory Plugin <= 5.0.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Listing DescriptionNovember 17, 20255.0.4Medium
*-5.2.0Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.2.0 - Missing Authorization to Authenticated (Subscriber+) Listing Types TamperingNovember 10, 20255.2.1Medium
*-5.0.6Classified Listing <= 5.0.6 - Missing AuthorizationSeptember 3, 20255.0.7Medium
*-5.0.0Classified Listing <= 5.0.0 - Authenticated (Contributor+) Content InjectionJuly 30, 20255.0.1Medium
*-4.2.0Classified Listing <= 4.2.0 - Authenticated (Contributor+) Local File InclusionJune 19, 20254.2.1High
*-4.0.4Classified Listing – Classified ads & Business Directory Plugin <= 4.0.4 - Unauthenticated Settings ExposureFebruary 24, 20254.0.5Medium
*-3.1.15.1Classified Listing – Classified ads & Business Directory Plugin <= 3.1.15.1 - Authenticated (Subscriber+) Limited Arbitrary Option UpdateNovember 18, 20243.1.16High
*-3.1.16Classified Listing <= 3.1.16 - Authenticated (Contributor+) Local File InclusionNovember 11, 20243.1.17High
*-4.0.1Classified Listing – Classified ads & Business Directory Plugin <= 4.0.1 - Reflected Cross-Site ScriptingOctober 27, 20244.0.2Medium
*-3.1.7Classified Listing – Classified ads & Business Directory Plugin <= 3.1.7 - Missing AuthorizationSeptember 12, 20243.1.8Medium
*-3.0.10.3Classified Listing – Classified ads & Business Directory Plugin <= 3.0.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment DeletionApril 24, 20243.0.11Medium
*-3.0.4Classified Listing – Classified ads & Business Directory Plugin <= 3.0.4 - Missing AuthorizationApril 4, 20243.0.5Medium
*-3.0.4Classified Listing <= 3.0.4 - Cross-Site Request Forgery to Account Takeover via rtcl_update_user_accountApril 4, 20243.0.5High
*-2.4.5Classified Listing <= 2.4.5 - Cross-Site Request Forgery via rtcl_ajax_thumbnail_deleteJuly 5, 20232.4.6Medium
[*, 2.2.14)Classima < 2.1.11 - Reflected Cross-Site ScriptingAugust 22, 20222.2.14Medium

Selected source records

Latest Records

MediumCVE-2026-57355

Classified Listing – AI-Powered Classified ads & Business Directory <= 5.4.2 - Missing Authorization

Published: July 1, 2026

Affected versions
*-5.4.2
Patched versions
5.4.3
Original Wordfence record
MediumCVE-2026-14183

Classified Listing <= 5.3.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) Receipt Disclosure

Published: June 30, 2026

Affected versions
*-5.3.8
Patched versions
5.3.9
Original Wordfence record
HighCVE-2026-57344

Classified Listing – AI-Powered Classified ads & Business Directory <= 5.4.2 - Unauthenticated Stored Cross-Site Scripting

Published: June 29, 2026

Affected versions
*-5.4.2
Patched versions
5.4.3
Original Wordfence record
MediumCVE-2026-10779

Classified Listing <= 5.4.2 - Missing Authorization to Authenticated (Subscriber+) Feature Modification via Multiple AJAX Handlers ('listingId'/'id' Parameters)

Published: June 18, 2026

Affected versions
*-5.4.2
Patched versions
5.4.3
Original Wordfence record
MediumCVE-2026-42679

Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Authenticated (Subscriber+) Arbitrary File Download

Published: May 17, 2026

Affected versions
*-5.3.8
Patched versions
5.3.9
Original Wordfence record
MediumCVE-2026-7563

Classified Listing <= 5.3.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via add_order_note and send_email_to_user_by_moderator AJAX Actions

Published: May 14, 2026

Affected versions
*-5.3.10
Patched versions
5.4.0
Original Wordfence record
MediumCVE-2026-42651

Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.9 - Missing Authorization

Published: April 29, 2026

Affected versions
*-5.3.9
Patched versions
5.3.10
Original Wordfence record
MediumCVE-2026-42640

Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Missing Authorization

Published: April 29, 2026

Affected versions
*-5.3.8
Patched versions
5.3.9
Original Wordfence record

Highest-Severity Records

HighCVE-2024-11194

Classified Listing – Classified ads & Business Directory Plugin <= 3.1.15.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update

Published: November 18, 2024

Affected versions
*-3.1.15.1
Patched versions
3.1.16
Original Wordfence record
HighCVE-2025-52715

Classified Listing <= 4.2.0 - Authenticated (Contributor+) Local File Inclusion

Published: June 19, 2025

Affected versions
*-4.2.0
Patched versions
4.2.1
Original Wordfence record
HighCVE-2024-1315

Classified Listing <= 3.0.4 - Cross-Site Request Forgery to Account Takeover via rtcl_update_user_account

Published: April 4, 2024

Affected versions
*-3.0.4
Patched versions
3.0.5
Original Wordfence record
HighCVE-2024-52386

Classified Listing <= 3.1.16 - Authenticated (Contributor+) Local File Inclusion

Published: November 11, 2024

Affected versions
*-3.1.16
Patched versions
3.1.17
Original Wordfence record
HighCVE-2026-57344

Classified Listing – AI-Powered Classified ads & Business Directory <= 5.4.2 - Unauthenticated Stored Cross-Site Scripting

Published: June 29, 2026

Affected versions
*-5.4.2
Patched versions
5.4.3
Original Wordfence record
HighCVE-2026-42658

Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Unauthenticated Stored Cross-Site Scripting

Published: April 29, 2026

Affected versions
*-5.3.8
Patched versions
5.3.9
Original Wordfence record
MediumCVE-2024-1352

Classified Listing – Classified ads & Business Directory Plugin <= 3.0.4 - Missing Authorization

Published: April 4, 2024

Affected versions
*-3.0.4
Patched versions
3.0.5
Original Wordfence record
MediumCVE-2024-7888

Classified Listing – Classified ads & Business Directory Plugin <= 3.1.7 - Missing Authorization

Published: September 12, 2024

Affected versions
*-3.1.7
Patched versions
3.1.8
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

WordPress Malware RemovalWordPress Security MaintenanceContact 3Zero Digital

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory