CVE-2025-1063: Classified Listing – Classified ads & Business Directory Plugin <= 4.0.4 - Unauthenticated Settings Exposure
The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.0.4 via the rtcltaxonomysettingsexport function. This makes it possible for unauthenticated attackers to extract sensitive data including API keys and tokens.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1063?
CVE-2025-1063 is considered high severity due to the potential for sensitive information exposure.
How do I fix CVE-2025-1063?
To fix CVE-2025-1063, update the Classified Listing – Classified ads & Business Directory Plugin to version 4.0.5 or later.
Who is affected by CVE-2025-1063?
CVE-2025-1063 affects all versions of the Classified Listing – Classified ads & Business Directory Plugin up to and including version 4.0.4.
What is the impact of CVE-2025-1063?
The impact of CVE-2025-1063 includes unauthorized access to sensitive information by unauthenticated attackers.
What specific function is vulnerable in CVE-2025-1063?
The rtcl_taxonomy_settings_export function is the specific point of vulnerability in CVE-2025-1063.