Medium
CVE-2026-42679
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 76
Reset filters
Medium
CVE-2026-7563
Classified Listing <= 5.3.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via add_order_note and send_email_to_user_by_moderator AJAX Actions
High
CVE-2026-3892
Motors – Car Dealer, Classifieds & Listing <= 1.4.107 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_dealer_logo_path' Parameter
Medium
CVE-2026-1934
Motors – Car Dealership & Classified Listings Plugin <= 1.4.103 - Missing Authorization to Authenticated (Subscriber+) Payment Bypass via 'stm_payment_status' Parameter
High
CVE-2026-42658
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-42640
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.8 - Missing Authorization
Medium
CVE-2026-42651
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.9 - Missing Authorization
Medium
CVE-2026-39515
Motors – Car Dealership & Classified Listings Plugin < 1.4.107 - Missing Authorization
Medium
CVE-2026-23546
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.4 - Authenticated (Subscriber+) Sensitive Data Exposure
Medium
CVE-2025-7711
Classified Listing – Classified ads & Business Directory Plugin <= 5.0.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Listing Description
Medium
CVE-2025-12953
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.2.0 - Missing Authorization to Authenticated (Subscriber+) Listing Types Tampering
High
CVE-2025-10494
Motors – Car Dealership & Classified Listings Plugin <= 1.4.89 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2025-9874
Ultimate Classified Listings <= 1.6 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-0763
Ultimate Classified Listings <= 1.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update
Medium
CVE-2025-58601
Classified Listing <= 5.0.6 - Missing Authorization
Medium
CVE-2025-54691
Motors <= 1.4.80 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2025-54698
Classified Listing <= 5.0.0 - Authenticated (Contributor+) Content Injection
High
CVE-2025-52715
Classified Listing <= 4.2.0 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-32654
Motors <= 1.4.71 - Unauthenticated Local File Inclusion
High
CVE-2025-2807
Motors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
Medium
CVE-2025-3437
Motors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-up
Medium
CVE-2025-2808
Motors – Car Dealership & Classified Listings Plugin <= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-32170
Motors <= 1.4.71 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-32142
Motors <= 1.4.71 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.