Unrated severityNVD Advisory· Published Oct 14, 2026

CVE-2026-106646

Description

The Classified Listing WordPress plugin before 6.1.1 does not verify that the requester owns or can edit the target listing when a gallery request references an unattached media item, allowing any authenticated user with a subscriber-level account to modify, corrupt or delete media-library attachments owned by other users, including administrators.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Classified Listingllm-fuzzy
Range: <6.1.1
Package: https://wordpress.org/plugins/classified-listing

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/84adffd9-6982-4c05-a42d-be208035d9a8/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000