Data Modification Vulnerability in Ultimate Classified Listings Plugin for WordPress

CVE-2025-0763

What is CVE-2025-0763?

The Ultimate Classified Listings plugin for WordPress is susceptible to unauthorized data modification due to a lack of capability checks within the save_custom_fields function. This vulnerability allows authenticated users with Subscriber-level access and higher to alter custom fields within the plugin. All versions up to and including 1.6 are affected, highlighting the importance of implementing proper access controls to prevent potential security breaches.

References