Ttechlabpro1

Products

Exploited and recent CVEs

• CVE-2026-102402 Medium 6.4 Team <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ttp_filter_taxonomy' Post Meta via [tlpteam] Shortcode 0.2%
• CVE-2026-10779 Medium 4.3 Classified Listing <= 5.4.2 - Missing Authorization to Authenticated (Subscriber+) Feature Modification via Multiple AJAX Handlers ('listingId'/'id' Parameters) 0.4%
• CVE-2026-7563 Medium 4.3 Classified Listing <= 5.3.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via add_order_note and send_email_to_user_by_moderator AJAX Actions 0.3%
• CVE-2025-7711 Medium 5.4 Classified Listing – Classified ads & Business Directory Plugin <= 5.0.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Listing Description 0.2%
• CVE-2025-12953 Medium 4.3 Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.2.0 - Missing Authorization to Authenticated (Subscriber+) Listing Types Tampering 0.2%
• CVE-2025-5844 Medium 6.4 Radius Blocks <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via subHeadingTagName Parameter 0.3%
• CVE-2025-7327 High 8.8 Widget for Google Reviews <= 1.0.15 - Authenticated (Subscriber+) Directory Traversal to Local File Inclusion 0.8%
• CVE-2025-1707 High 8.8 Review Schema <= 2.2.4 - Authenticated (Contributor+) Local File Inclusion via Post Meta 0.7%
• CVE-2025-1063 Medium 5.3 Classified Listing – Classified ads & Business Directory Plugin <= 4.0.4 - Unauthenticated Settings Exposure 0.4%
• CVE-2024-13439 Medium 4.3 Team – Team Members Showcase Plugin <= 4.4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Update 0.3%
• CVE-2024-13415 Medium 4.3 Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 5.1.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update 0.3%
• CVE-2024-11194 High 8.8 Classified Listing – Classified ads & Business Directory Plugin <= 3.1.15.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update 0.6%
• CVE-2024-7888 Medium 6.3 Classified Listing – Classified ads & Business Directory Plugin <= 3.1.7 - Missing Authorization 0.3%
• CVE-2024-7418 Medium 4.3 The Post Grid <= 7.7.11 - Authenticated (Contributor+) Information Disclosure 0.5%
• CVE-2024-1427 Medium 6.4 The Post Grid <= 7.7.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via section title tag 0.3%
• CVE-2024-3936 Medium 4.3 The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 7.6.1 - Missing Authorization 0.6%
• CVE-2024-3893 Medium 4.3 Classified Listing – Classified ads & Business Directory Plugin <= 3.0.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion 0.4%
• CVE-2024-1352 Medium 6.5 Classified Listing – Classified ads & Business Directory Plugin <= 3.0.4 - Missing Authorization 0.5%
• CVE-2024-1315 High 8.8 Classified Listing <= 3.0.4 - Cross-Site Request Forgery to Account Takeover via rtcl_update_user_account 0.5%
• CVE-2024-0836 Medium 4.3 WordPress Review & Structure Data Schema Plugin – Review Schema <= 2.1.14 - Missing Authorization to Arbitrary Review Update 0.4%