CVE-2024-11194

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a misconfigured check on the 'rtcl_import_settings' function in all versions up to, and including, 3.1.15.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update limited arbitrary options on the WordPress site. This can be leveraged to update the Subscriber role with Administrator-level capabilities to gain administrative user access to a vulnerable site. The vulnerability is limited in that the option updated must have a value that is an array.

• CWE-862

• https://plugins.trac.wordpress.org/browser/classified-listing/tags/3.1.12/app/Controllers/Ajax/Import.php#L309
• https://plugins.trac.wordpress.org/browser/classified-listing/tags/3.1.12/app/Controllers/Ajax/Import.php#L473
• https://plugins.trac.wordpress.org/changeset/3189516/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/13d9a59f-1a1a-4936-a5ab-8a5e0c50303b?source=cve

Published

Nov 19, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-11189The Social Share And Social Locker WordPress plugin before …4.8
• CVE-2024-1119The Order Tip for WooCommerce plugin for WordPress is vulner…5.3
• CVE-2024-11190The jwp-a11y WordPress plugin through 4.1.7 does not sanitis…4.8
• CVE-2024-11191Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-11192The Spotify Play Button for WordPress plugin for WordPress i…6.4
• CVE-2024-11193An information disclosure vulnerability exists in Yugabyte A…6.5
• CVE-2024-11195The Email Subscription Popup plugin for WordPress is vulnera…6.4
• CVE-2024-11196The Multi-column Tag Map plugin for WordPress is vulnerable …6.4
• CVE-2024-11197The Lock User Account plugin for WordPress is vulnerable to …4.2
• CVE-2024-11198The GD Rating System plugin for WordPress is vulnerable to S…6.4
• CVE-2024-11199The Rescue Shortcodes plugin for WordPress is vulnerable to …5.4
• CVE-2024-1120The NextMove Lite – Thank You Page for WooCommerce and Final…5.3