Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 76
Reset filtersClassified Listing – Classified ads & Business Directory Plugin <= 4.0.4 - Unauthenticated Settings Exposure
Ultimate Classified Listings <= 1.4 Authenticated (Administrator+) Stored Cross-Site Scripting via Title Parameter
Ultimate Classified Listings <= 1.5 - Cross-Site Request Forgery to Account Takeover
Motors – Car Dealer, Classifieds & Listing <= 1.4.43 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Custom Title
Clasify Classified Listing <= 1.0.7 - Reflected Cross-Site Scripting
Ultimate Classified Listings <= 1.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Ultimate Classified Listings <= 1.7 - Authenticated (Contributor+) Local File Inclusion
Classified Listing – Classified ads & Business Directory Plugin <= 3.1.15.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update
Classified Listing <= 3.1.16 - Authenticated (Contributor+) Local File Inclusion
Classified Listing – Classified ads & Business Directory Plugin <= 4.0.1 - Reflected Cross-Site Scripting
Classified Listing – Classified ads & Business Directory Plugin <= 3.1.7 - Missing Authorization
Ultimate Classified Listings <= 1.3 - Reflected Cross-Site Scripting
Ultimate Classified Listings <= 1.3 - Unauthenticated Local File Inclusion
Ultimate Classified Listings <= 1.2 - Reflected Cross-Site Scripting
Motors – Car Dealer, Classifieds & Listing <= 1.4.9 - Missing Authorization
Classified Listing – Classified ads & Business Directory Plugin <= 3.0.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion
Classified Listing – Classified ads & Business Directory Plugin <= 3.0.4 - Missing Authorization
Classified Listing <= 3.0.4 - Cross-Site Request Forgery to Account Takeover via rtcl_update_user_account
Motors – Car Dealer & Classified Ads <= 1.4.6 - Server Side Request Forgery
Motors – Car Dealer & Classified Ads <= 1.4.6 - Reflected Cross-Site Scripting
Classified Listing <= 2.4.5 - Cross-Site Request Forgery via rtcl_ajax_thumbnail_delete
Motors – Car Dealer & Classified Ads <= 1.4.5 - Cross-Site Request Forgery via Multiple Functions
Motors – Car Dealer, Classifieds & Listing <= 1.4.3 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.