Security Advisory
CVE-2026-14183
4.3
MEDIUM
Vulnerability Description
The Classified Listing WordPress plugin before 5.3.9 does not verify that the order targeted by its payment-receipt handler belongs to the requesting user, allowing authenticated users with subscriber-level access to read the payment receipt details of any other user's order.
Published Date
July 21, 2026
Official Source
NIST NVD Advisory