CVE-2026-16276
Received Received - Intake

Revenue Data Exposure in Classified Listing WordPress Plugin

Publication date: 2026-08-03

Last updated on: 2026-08-03

Assigner: WPScan

Description
The Classified Listing WordPress plugin before 5.4.4 does not perform a capability check on an AJAX action that returns aggregated store revenue totals, allowing users with contributor-level access and above to read daily revenue figures normally restricted to administrators and report managers.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-03
Last Modified
2026-08-03
Generated
2026-08-03
AI Q&A
2026-08-03
EPSS Evaluated
N/A
NVD
CVE-2026-16276
EUVD
EUVD-2026-52164

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
classified_listing wordpress_plugin to 5.4.4 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Classified Listing WordPress plugin before version 5.4.4. It allows users with contributor-level access or higher to view daily revenue totals of stores through an AJAX action that lacks proper capability checks. Normally, this data is restricted to administrators and report managers.

Impact Analysis

If you use this plugin, unauthorized users could access sensitive revenue data, leading to potential data leaks or misuse of financial information. This could harm your business reputation and customer trust.

Compliance Impact

This vulnerability could violate GDPR by exposing financial data without proper authorization. For HIPAA, if revenue data includes protected health information, it may also lead to compliance issues. Unauthorized access risks non-compliance with data protection requirements.

Mitigation Strategies

Update the Classified Listing WordPress plugin to version 5.4.4 or later to address the missing capability check vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-16276. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart