CVE-2026-111828 — WordPress Classified Listing plugin <= 6.1.5 - Direct static code injection vulnerability

CVE-2026-111828

WordPress Classified Listing plugin <= 6.1.5 - Direct static code injection vulnerability PUBLISHED

Description (CNA)

Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.5.

Affected (CNA)

Vendor / product	Versions
Mamunur Rashid / Classified Listing	affected 0 through 6.1.5

CWE

CWE-1284

References

https://patchstack.com/database/wordpress/plugin/classified-listing/vulnerability/wordpress-classified-listing-plugin-6-1-5-direct-static-code-injection-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.