Mamunur Rashid vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Mamunur Rashid products: 9 record(s), with severity, exploitation and fixes.

Classified Listing 6 ShopBuilder – Elementor WooCommerce Builder Addons 1 The Post Grid 1 Review Schema 1

Exploited only (KEV) →

CVE-2026-95596 High · 7.1 CWE-79 Oct 9, 2026

WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Reflected XSS.This issue affects ShopBuilder – Elementor WooCommerce Builder Addons: from n/a through 3.4.1.

CVE-2026-94665 Medium · 6.5 CWE-79 Oct 9, 2026

WordPress Classified Listing plugin <= 6.1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid Classified Listing classified-listing allows Stored XSS.This issue affects Classified Listing: from n/a through 6.1.2.

CVE-2026-97280 Medium · 6.5 CWE-862 Oct 1, 2026

WordPress Review Schema plugin 3.1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mamunur Rashid Review Schema review-schema allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Review Schema: 3.1.0.

CVE-2026-84217 Medium · 5.4 CWE-862 Sep 2, 2026

WordPress Classified Listing plugin <= 6.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.3.

CVE-2026-42658 High · 7.1 CWE-79 Jun 15, 2026

WordPress Classified Listing plugin <= 5.3.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.3.8 versions.

CVE-2026-42651 Medium · 6.3 CWE-862 Jun 15, 2026

WordPress Classified Listing plugin <= 5.3.9 - Broken Access Control vulnerability

Subscriber Broken Access Control in Classified Listing <= 5.3.9 versions.

CVE-2026-42640 Medium · 6.5 CWE-862 Jun 15, 2026

WordPress Classified Listing plugin <= 5.3.8 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Classified Listing <= 5.3.8 versions.

CVE-2026-42679 Medium · 6.5 CWE-22 Jun 1, 2026

WordPress Classified Listing plugin <= 5.3.8 - Arbitrary File Download vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mamunur Rashid Classified Listing allows Path Traversal. This issue affects Classified Listing: from n/a through 5.3.8.

CVE-2026-49054 Medium · 4.3 CWE-862 May 27, 2026

WordPress The Post Grid plugin <= 7.9.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mamunur Rashid The Post Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Post Grid: from n/a through 7.9.2.