Ultimate Classified Listings – Classifieds, Directory & Marketplace

Ultimate Classified Listings – Classifieds, Directory & Marketplace has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; 8 are fixed and 1 remains unpatched as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2024 was the busiest year with 5 disclosures.

The most common weakness is Cross-Site Scripting, behind 5 of the records (56%). Other recurring categories include PHP Remote File Inclusion, Cross-Site Request Forgery (CSRF).

8 of the records (89%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

9 independent researchers contributed these findings, one record each. Ultimate Classified Listings – Classifieds, Directory & Marketplace is installed on roughly 40 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage89%
Open

1

Fixed

8

Get automatic notifications for all Ultimate Classified Listings – Classifieds, Directory & Marketplace vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-0763

Ultimate Classified Listings <= 1.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update

Read the full analysis

Vulnerability Records

9 records
2025-09-10 18:52CVE-2025-9874
7.5
High
Gilang - DJYes
2025-09-10 00:00CVE-2025-0763
4.3
Medium
Ivan KuzymchakNo
2025-02-19 21:10CVE-2024-13748
4.4
Medium
Nguyễn Văn ĐạtYes
2025-02-19 21:09CVE-2024-13753
8.1
High
Rob BanksYes
2024-11-19 00:00CVE-2024-52487
6.4
Medium
Fariq Fadillah Gusti Insani (fariqfgi)Yes
2024-11-18 00:00CVE-2024-52448
8.8
High
theviper17yYes
2024-07-11 00:00CVE-2024-6529
6.1
Medium
Erwan LRYes
2024-07-08 00:00CVE-2024-5883
6.1
Medium
Bob MatyasYes
2024-07-08 00:00CVE-2024-5882
6.1
Medium
Eddie Zhang (Project Black)Yes
Showing 1–9 of 9 reports
Ultimate Classified Listings – Classifieds, Directory & Marketplace banner
Latestv2.5

Ultimate Classified Listings – Classifieds, Directory & Marketplace

WebCodingPlace

Author

WebCodingPlace

5.0(2)
100/100
Last Updated
2026-09-30 (28d ago)
Active Installs
40+
Downloads
5,071
Requires WP
6.0+
Requires PHP
7.4+
Tested up to
WP 7.1.3
Created
2022-08-01 (4y ago)

Ultimate Classified Listings turns any WordPress site into a classifieds, directory or marketplace website — without the bloat, and without paying for the basics. Frontend listing submission, AJAX search with filters, maps with a “near me” radius, unlimited custom fields and a seller dashboard are all included in the free core. A 60-second setup wizard creates every page for you and can even load sample listings so you have something to look at from minute one. It stays deliberately lightweight. There is no page-builder dependency and no heavy framework loaded on every page — assets load only where a listing, search or dashboard is actually rendered. That keeps front-end pages fast and makes the plugin easy to drop onto an existing theme. Whether you’re building a Craigslist-style classifieds board, a local business directory, a real-estate site, a jobs board, an automotive marketplace or a community “buy & sell” section, you get a complete, secure, mobile-friendly listing workflow out of the box — and everything advertised here works in the free version. Why choose Ultimate Classified Listings Free where the big plugins paywall. Maps, AJAX search, frontend submission, custom fields, SEO structured data and social sharing are all in the free core — not locked behind an add-on bundle. No API keys to chase. Interactive maps and “near me” radius search run on OpenStreetMap (Leaflet) out of the box. Prefer Google Maps? Add a key and switch — your choice, not a requirement. SEO-ready out of the box. Every listing automatically outputs schema.org Product, Offer and Breadcrumb structured data (JSON-LD) plus Open Graph / Twitter Card tags, so listings are eligible for Google rich results and look great when shared. It steps aside politely when a dedicated SEO plugin is already handling social meta. Lightweight & fast. Scoped CSS/JS, conditional asset loading, and no bloated builder to power your listings. Security-first. CSRF nonces on every AJAX endpoint, capability checks on every action, hashed passwords, email-injection protection and rate-limited auth flows. Theme & builder friendly. Shortcodes work in Gutenberg, Elementor, Divi and any builder, and every template can be overridden from your theme. Developer friendly & multilingual. 40+ hooks and filters, REST API support on the listing post type, and WPML / Polylang awareness. Core features (all free) Frontend listing submission with custom field sections, image galleries, video and maps Seller dashboard — add, edit, delete and manage listings, plus profile management Unlimited custom fields and field sections via a drag-and-drop builder Categories and tags with custom icons / images AJAX-powered search with filters, price range, custom-field filters and sort — three search-form styles Map search — matching results plotted on a clustered map with a “Near me” / radius filter Ratings & reviews — visitors rate and review listings; the aggregate rating feeds Google’s structured data so listings can show star ratings in search results SEO structured data — automatic Product, Offer, Rating & Breadcrumb JSON-LD + Open Graph / Twitter cards Social sharing — Facebook, X, WhatsApp, LinkedIn and email buttons on every listing (no third-party scripts or tracking) Related listings — same-category listings shown on each detail page to keep visitors browsing Featured listings — promote any listing with a badge and float it to the top of results; one-click star toggle in the admin Listing expiry — optionally expire listings after N days, email the seller before/after, and let sellers renew from their dashboard Favorites — visitors can save listings and revisit them from the dashboard Listing comparison — side-by-side compare table One-click demo importer — seed realistic sample listings for your chosen site type from the setup wizard Google Maps or OpenStreetMap (Leaflet) with per-listing location markers Gallery slider or grid-with-popup, plus card image, corner-radius and colour controls Two seller-registration modes (auto-approve or manual approval) and two submission modes (publish or pending review) Contact-seller form with reCAPTCHA and email-injection protection Dark mode (off / auto / toggle / force) Four listing card styles, three single-listing styles Full theme template overrides under /your-theme/ucl/...

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C