Ultimate Classified Listings WordPress Plugin Missing Authorization Vulnerability

A vulnerability exists in the Ultimate Classified Listings WordPress plugin, all versions through 1.6, allowing authenticated users with Subscriber-level access and above to unauthorizedly modify plugin custom fields. This issue arises from a lack of proper capability checks in the save_custom_fields function, enabling these users to alter data that they should not have permission to change.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in plugin custom fields, potentially allowing for manipulation of listing data or other related information.

Remediation

No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.