Skip to content

WebCodingPlace · weakness class

File and Path Handling

8 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

  1. Ultimate Classified Listings <= 1.6 - Authenticated (Contributor+) Local File InclusionCVE-2025-9874webcodingplace · CVSS 7.5 · 1.0% likely

    CWE-98

  2. Classic Addons – WPBakery Page Builder <= 3.0 - Authenticated (Contributor+) Limited Local PHP File InclusionCVE-2024-11952webcodingplace · CVSS 7.5 · 0.9% likely

    CWE-22

  3. Ultimate Classified Listings < 1.3 - Unauthenticated LFICVE-2024-5882Webcodingplace · CVSS 7.5 · 0.8% likely

    CWE-22

  4. WordPress Responsive Posts Carousel WordPress Plugin Plugin <= 15.0 - Local File Inclusion VulnerabilityCVE-2025-52728WebCodingPlace · CVSS 7.5 · 0.7% likely

    CWE-98

  5. WordPress Classic Addons – WPBakery Page Builder plugin <= 3.0 - Local File Inclusion vulnerabilityCVE-2024-56286webcodingplace · CVSS 7.5 · 0.6% likely

    CWE-22

  6. WordPress Ultimate Classified Listings plugin <= 1.7 - Local File Inclusion vulnerabilityCVE-2024-52448webcodingplace · CVSS 7.5 · 0.6% likely

    CWE-22

  7. WordPress WooCommerce Coming Soon Product with Countdown plugin <= 5.0 - Local File Inclusion vulnerabilityCVE-2025-68552WebCodingPlace · CVSS 7.5 · 0.5% likely

    CWE-98

  8. WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Local File Inclusion vulnerabilityCVE-2025-68996WebCodingPlace · CVSS 7.5 · 0.4% likely

    CWE-98

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.