CVE-2025-12953

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-12953", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-11-10T13:49:05.597Z", "datePublished": "2025-11-11T11:03:45.759Z", "dateUpdated": "2026-04-08T17:03:40.748Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:03:40.748Z"}, "affected": [{"vendor": "techlabpro1", "product": "Classified Listing \u2013 AI-Powered Classified ads & Business Directory Plugin", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "5.2.0", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Classified Listing \u2013 AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the \"rtcl_ajax_add_listing_type\", \"rtcl_ajax_update_listing_type\", and \"rtcl_ajax_delete_listing_type\" function in all versions up to, and including, 5.2.0. This makes it possible for authenticated attackers, with subscriber level access and above, to add, update, or delete listing types."}], "title": "Classified Listing \u2013 AI-Powered Classified ads & Business Directory Plugin <= 5.2.0 - Missing Authorization to Authenticated (Subscriber+) Listing Types Tampering", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/811f147e-5829-4f7e-91d8-9dba780950d5?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset/3389342/classified-listing/trunk/app/Controllers/Ajax/AjaxListingType.php"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-862 Missing Authorization", "cweId": "CWE-862", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Rafshanzani Suhada"}], "timeline": [{"time": "2025-10-11T00:00:00.000Z", "lang": "en", "value": "Discovered"}, {"time": "2025-10-21T04:24:14.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-11-10T22:39:09.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-14T15:20:48.458365Z", "id": "CVE-2025-12953", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-14T15:29:30.681Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-12953", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-14T15:20:48.458365Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-14T15:20:49.114Z"}}], "cna": {"title": "Classified Listing \u2013 AI-Powered Classified ads & Business Directory Plugin <= 5.2.0 - Missing Authorization to Authenticated (Subscriber+) Listing Types Tampering", "credits": [{"lang": "en", "type": "finder", "value": "Rafshanzani Suhada"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"}}], "affected": [{"vendor": "techlabpro1", "product": "Classified Listing \u2013 AI-Powered Classified ads & Business Directory Plugin", "versions": [{"status": "affected", "version": "*", "versionType": "semver", "lessThanOrEqual": "5.2.0"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-10-11T00:00:00.000Z", "value": "Discovered"}, {"lang": "en", "time": "2025-10-21T04:24:14.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-11-10T22:39:09.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/811f147e-5829-4f7e-91d8-9dba780950d5?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset/3389342/classified-listing/trunk/app/Controllers/Ajax/AjaxListingType.php"}], "descriptions": [{"lang": "en", "value": "The Classified Listing \u2013 AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the \"rtcl_ajax_add_listing_type\", \"rtcl_ajax_update_listing_type\", and \"rtcl_ajax_delete_listing_type\" function in all versions up to, and including, 5.2.0. This makes it possible for authenticated attackers, with subscriber level access and above, to add, update, or delete listing types."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862 Missing Authorization"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2025-11-11T11:03:45.759Z"}}}, "cveMetadata": {"cveId": "CVE-2025-12953", "state": "PUBLISHED", "dateUpdated": "2025-11-14T15:29:30.681Z", "dateReserved": "2025-11-10T13:49:05.597Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-11-11T11:03:45.759Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Classified Listing \u2013 AI-Powered Classified ads & Business Directory Plugin", "vendor": "techlabpro1", "versions": [{"lessThanOrEqual": "5.2.0", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Classified Listing \u2013 AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the \"rtcl_ajax_add_listing_type\", \"rtcl_ajax_update_listing_type\", and \"rtcl_ajax_delete_listing_type\" function in all versions up to, and including, 5.2.0. This makes it possible for authenticated attackers, with subscriber level access and above, to add, update, or delete listing types."}, {"lang": "es", "value": "El plugin Classified Listing - AI-Powered Classified ads & Business Directory Plugin para WordPress es vulnerable a la modificaci\u00f3n no autorizada de datos debido a una verificaci\u00f3n de capacidad faltante en la funci\u00f3n \u201crtcl_ajax_add_listing_type\u201d, \u201crtcl_ajax_update_listing_type\u201d y \u201crtcl_ajax_delete_listing_type\u201d en todas las versiones hasta, e incluyendo, la 5.2.0. Esto hace posible que atacantes autenticados, con acceso de nivel suscriptor y superior, a\u00f1adan, actualicen o eliminen tipos de listado."}], "id": "CVE-2025-12953", "lastModified": "2026-10-18T21:10:00.120", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-12953", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-11-14T15:20:48.458365Z", "version": "2.0.3"}}]}, "published": "2025-11-11T11:15:35.230", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset/3389342/classified-listing/trunk/app/Controllers/Ajax/AjaxListingType.php"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/811f147e-5829-4f7e-91d8-9dba780950d5?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-21T18:25:16.363567+00:00", "value": {"mitigation_remediation": ["Contact the plugin developer to obtain a patched version or an official update", "Upgrade the plugin to any release newer than 5.2.0 once available", "If an update is unavailable, restrict subscriber role capabilities or remove the AJAX endpoints responsible for listing type management to prevent unauthorized modifications"], "summary": {"action": "Assess Impact", "impact": "Unauthorized data modification of listing types"}, "threat_synthesis": {"affected_systems": "WordPress sites using the Classified Listing \u2013 AI\u2011Powered Classified ads & Business Directory Plugin up to and including version 5.2.0 are affected. The vulnerability is present in all releases in that range, regardless of host configuration.", "description_and_impact": "The Classified Listing plugin for WordPress lacks a capability check on its AJAX endpoints that manage listing types. As a result, any user who has subscriber or higher privileges can add, alter, or delete listing types without restriction. This flaw allows an attacker to change the structure and behavior of listings, potentially compromising the integrity of the directory and enabling malicious content or misrepresenting services.", "risk_and_exploitability": "The CVSS score of 4.3 indicates low severity from a technical standpoint, and the EPSS score of less than 1% signals a very low likelihood of exploitation. The flaw is not listed in the CISA KEV catalog. Because the attack requires only subscriber\u2011level authentication, a legitimate user account is sufficient to exploit the weakness, making it a straightforward privilege\u2011escalation scenario for anyone with those basic access rights. The impact primarily concerns data integrity and possible abuse of the directory feature."}}}}, "created": "2025-11-12T12:42:45.389686+00:00", "updated": "2026-04-21T18:30:27.584735+00:00", "vendors": ["techlabpro1", "techlabpro1$PRODUCT$classified_listing_plugin", "wordpress", "wordpress$PRODUCT$wordpress"]}