Classified Listing WordPress Plugin Shortcode Execution Vulnerability

A vulnerability exists in the Classified Listing – Classified ads & Business Directory Plugin for WordPress, allowing authenticated users with Subscriber-level access and above to execute arbitrary shortcodes. This issue affects all versions of the plugin prior to 5.0.3. The vulnerability arises because the plugin does not properly validate user input before processing shortcodes, enabling the execution of potentially harmful code.

Impact

Exploitation of this vulnerability could lead to unauthorized shortcode execution, allowing attackers to inject and execute custom code within the WordPress environment, potentially causing further harm or disruption.

Remediation

Users are advised to update the Classified Listing – Classified ads & Business Directory Plugin to version 5.0.4 or a newer patched version.