Webcodingplace - vulnerabilities (CVEs)
26 CVEs in 9 products, 0 in the last 30 days, newest from 2026-08-15.
Products
- Ultimate Classified Listings - 6 CVEs
- Real Estate Manager Pro - 4 CVEs
- Responsive Posts Carousel Pro - 4 CVEs
- Classic Addons Wpbakery Page Builder - 3 CVEs
- Product Expiry For Woocommerce - 2 CVEs
- Woocommerce Coming Soon Product With Countdown - 2 CVEs
- Classic Addons Wp Bakery Page Builder Plugin For Wordpress - 1 CVEs
- Image Caption Hover Pro - 1 CVEs
- Real Estate Manager - 1 CVEs
Newest CVEs of Webcodingplace
- CVE-2026-15142 - CVSS 7.5 (high), 2026-08-15: The Real Estate Manager Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 12.8.6. This is due to improper…
- CVE-2026-57701 - CVSS 7.1 (high), 2026-07-23: Unauthenticated Cross Site Scripting (XSS) in Real Estate Manager Pro <= 12.8.5 versions.
- CVE-2026-57398 - CVSS 7.1 (high), 2026-07-13: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebCodingPlace Real Estate Manager Pro…
- CVE-2026-27354 - CVSS 6.5 (medium), 2026-03-05: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebCodingPlace WooCommerce Coming Soon Product with…
- CVE-2026-27361 - CVSS 7.5 (high), 2026-03-05: Missing Authorization vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows Exploiting Incorrectly Configured…
- CVE-2025-68552 - CVSS 7.5 (high), 2026-02-20: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebCodingPlace WooCommerce Coming…
- CVE-2025-68996 - CVSS 7.5 (high), 2025-12-30: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebCodingPlace Responsive Posts…
- CVE-2025-68548 - CVSS 6.5 (medium), 2025-12-23: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebCodingPlace Responsive Posts Carousel Pro…
- CVE-2025-67562 - CVSS 5.4 (medium), 2025-12-09: Missing Authorization vulnerability in WebCodingPlace Image Caption Hover Pro image-caption-hover-pro allows Exploiting Incorrectly Configured Access Control…
- CVE-2025-9874 - CVSS 7.5 (high), 2025-09-11: The Ultimate Classified Listings plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6 via the…
- CVE-2025-0763 - CVSS 4.3 (medium), 2025-09-11: The Ultimate Classified Listings plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…
- CVE-2025-54032 - CVSS 7.1 (high), 2025-08-20: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebCodingPlace Real Estate Manager Pro…
- CVE-2025-52728 - CVSS 7.5 (high), 2025-08-14: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebCodingPlace Responsive Posts…
- CVE-2024-13753 - CVSS 8.8 (high), 2025-02-20: The Ultimate Classified Listings plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to…
- CVE-2024-13748 - CVSS 4.8 (medium), 2025-02-20: The Ultimate Classified Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Title parameter in all versions up to, and…
- CVE-2024-56286 - CVSS 7.5 (high), 2025-01-07: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in webcodingplace Classic Addons – WPBakery Page Builder…
- CVE-2024-11952 - CVSS 7.5 (high), 2024-12-04: The Classic Addons – WPBakery Page Builder plugin for WordPress is vulnerable to Limited Local PHP File Inclusion in all versions up to, and including, 3.0…
- CVE-2024-52487 - CVSS 6.5 (medium), 2024-12-02: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webcodingplace Ultimate Classified Listings…
- CVE-2024-52448 - CVSS 7.5 (high), 2024-11-20: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in webcodingplace Ultimate Classified Listings…
- CVE-2024-43953 - CVSS 6.5 (medium), 2024-08-29: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webcodingplace Classic Addons – WPBakery Page Builder…
- CVE-2024-6529 - CVSS 7.1 (high), 2024-08-01: The Ultimate Classified Listings WordPress plugin before 1.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a…
- CVE-2024-5883 - CVSS 4.7 (medium), 2024-07-29: The Ultimate Classified Listings WordPress plugin before 1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a…
- CVE-2024-5882 - CVSS 7.5 (high), 2024-07-29: The Ultimate Classified Listings WordPress plugin before 1.3 does not validate the `ucl_page` and `layout` parameters allowing unauthenticated users to access…
- CVE-2023-52179 - CVSS 5.4 (medium), 2024-06-11: Missing Authorization vulnerability in WebCodingPlace Product Expiry for WooCommerce.This issue affects Product Expiry for WooCommerce: from n/a through 2.5.
- CVE-2024-0201 - CVSS 5.4 (medium), 2024-01-03: The Product Expiry for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…
- CVE-2023-4239 - CVSS 8.8 (high), 2023-08-09: The Real Estate Manager plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 7.2 due to insufficient restriction on…
