Arbitrary Shortcode Execution Vulnerability in Classified Listing Plugin for WordPress

CVE-2025-7711

What is CVE-2025-7711?

The Classified Listing – Classified ads & Business Directory Plugin for WordPress contains a vulnerability that allows authenticated users with Subscriber-level access and higher to execute arbitrary shortcodes. The issue arises from improper validation of values before invoking the do_shortcode function, which can lead to unintended actions on the site. This vulnerability is present in all versions up to and including 5.0.3, making it critical for users to update their plugins to secure their websites against potential exploitation.

References