Live › vulnerability › CVE-2026-111828
Go to dashboardThe Classified Listing WordPress plugin by Mamunur Rashid fails to validate a quantity input, so functionality that should be restricted by access controls can be reached. The sources describe the flaw only as accessing functionality not properly constrained by ACLs, affecting versions through 6.1.5.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the Classified Listing WordPress plugin at version 6.1.5 or earlier are in scope. The sources do not say which configuration or role is needed to reach the flawed functionality, so the exact exposure is unknown. Sites that do not have the plugin installed can skip this.
No product ranges from the sources yet.
wp plugin get classified-listing --field=version6.1.5; anything at or below that version is in the affected range6.1.5 once the vendor release is confirmed; the sources do not name the fixed versionEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.5.
This page as .md · .json · in your agent: get_signal("CVE-2026-111828")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.