Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

techlabpro1 vulnerabilities

20 published CVEs name techlabpro1 among the affected products.

Published CVEs
20
Last 12 months
5
Critical
0
Known exploited
0

Critical 0High 4Medium 16Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20249
  2. 20258
  3. 20263

Newest CVEs

  • CVE-2026-102402

    Team <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ttp_filter_taxonomy' Post Meta via [tlpteam] Shortcode

    techlabpro1 · Team – Team Members Showcase Plugin

    Medium6.4
  • CVE-2026-10779

    Classified Listing <= 5.4.2 - Missing Authorization to Authenticated (Subscriber+) Feature Modification via Multiple AJAX Handlers ('listingId'/'id' Parameters)

    techlabpro1 · Classified Listing – AI-Powered Classified ads & Business Directory

    Medium4.3
  • CVE-2026-7563

    Classified Listing <= 5.3.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via add_order_note and send_email_to_user_by_moderator AJAX Actions

    techlabpro1 · Classified Listing – AI-Powered Classified ads & Business Directory Plugin

    Medium4.3
  • CVE-2025-7711

    Classified Listing – Classified ads & Business Directory Plugin <= 5.0.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Listing Description

    techlabpro1 · Classified Listing – AI-Powered Classified ads & Business Directory Plugin

    Medium5.4
  • CVE-2025-12953

    Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.2.0 - Missing Authorization to Authenticated (Subscriber+) Listing Types Tampering

    techlabpro1 · Classified Listing – AI-Powered Classified ads & Business Directory Plugin

    Medium4.3
  • CVE-2025-5844

    Radius Blocks <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via subHeadingTagName Parameter

    techlabpro1 · Radius Blocks – WordPress Gutenberg Blocks

    Medium6.4
  • CVE-2025-7327

    Widget for Google Reviews <= 1.0.15 - Authenticated (Subscriber+) Directory Traversal to Local File Inclusion

    techlabpro1 · Widget for Google Reviews

    High8.8
  • CVE-2025-1707

    Review Schema <= 2.2.4 - Authenticated (Contributor+) Local File Inclusion via Post Meta

    techlabpro1 · Review Schema – Review & Structure Data Schema Plugin

    High8.8
  • CVE-2025-1063

    Classified Listing – Classified ads & Business Directory Plugin <= 4.0.4 - Unauthenticated Settings Exposure

    techlabpro1 · Classified Listing – AI-Powered Classified ads & Business Directory Plugin

    Medium5.3
  • CVE-2024-13439

    Team – Team Members Showcase Plugin <= 4.4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Update

    techlabpro1 · Team – Team Members Showcase Plugin

    Medium4.3