CVE-2026-111828: WordPress Classified Listing plugin <= 6.1.5 - Direct static code injection vulnerability

Q: Who could exploit this issue?

An attacker needs at least low-privileged access to the affected WordPress site. The supplied data does not indicate that unauthenticated users can exploit it.

Q: Which versions are affected?

Classified Listing versions through 6.1.5 are affected. The earliest affected version is not specified.

Q: What impact is indicated by the severity data?

The CVSS vector indicates network-reachable exploitation with low attack complexity, no user interaction, and low confidentiality impact. It indicates no integrity or availability impact.

Published Oct 19, 2026

Updated

Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.5.

Affected Software

1 affected component

Mamunur Rashid Classified Listing<=6.1.5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Classified Listing to a version that resolves this vulnerability.
Fixed in 6.2.0

Event History

Oct 19, 2026

CVE Published

via MITRE·01:29 PM

Data Sourced

via MITRE·01:29 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·02:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who could exploit this issue?

An attacker needs at least low-privileged access to the affected WordPress site. The supplied data does not indicate that unauthenticated users can exploit it.

Which versions are affected?

Classified Listing versions through 6.1.5 are affected. The earliest affected version is not specified.

What impact is indicated by the severity data?

The CVSS vector indicates network-reachable exploitation with low attack complexity, no user interaction, and low confidentiality impact. It indicates no integrity or availability impact.

CVE-2026-111828: WordPress Classified Listing plugin <= 6.1.5 - Direct static code injection vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who could exploit this issue?

Which versions are affected?

What impact is indicated by the severity data?

Company

Resources

Contact

Frequently Asked Questions

Who could exploit this issue?

Which versions are affected?

What impact is indicated by the severity data?