← Database

CVE-2024-5882

HIGH CVSS: 7.5 Published: 2024-07-29 Modified: 2026-06-17

Description

The Ultimate Classified Listings WordPress plugin before 1.3 does not validate the `ucl_page` and `layout` parameters allowing unauthenticated users to access PHP files on the server from the listings page

Affected Platforms

Webcodingplace Ultimate Classified Listings

Weakness Type

CWE-22

References