CVE-2026-7563: TECHLABPRO1 Classified Listing – Ai-Powered Classified Ads & Business Directory Plugin

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 5.3.10. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to add arbitrary notes to any order and trigger unsolicited notification and moderation emails to listing owners without administrative authorization.

Affected products

• TECHLABPRO1 Classified Listing – Ai-Powered Classified Ads & Business Directory Plugin: up to and including 5.3.10

Published 2026-05-15. Last modified 2026-06-17.