PatchSiren cyber security CVE debrief

CVE-2026-84217 Mamunur Rashid CVE debrief

A Missing Authorization vulnerability in Mamunur Rashid Classified Listing allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Classified Listing: from n/a through 6.1.1. The CVSS score is 5.4, and the severity is MEDIUM. Defenders should assess exposure and prioritize updates to prevent unauthorized access. The vulnerability allows attackers to access functionality not properly constrained by ACLs, potentially leading to security breaches. WordPress administrators and security teams should verify and update Classified Listing installations to prevent unauthorized access to functionality.

Vendor: Mamunur Rashid
Product: Classified Listing
CVSS: MEDIUM 5.4
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-09-02
Original CVE updated: 2026-09-23
Advisory published: 2026-09-02
Advisory updated: 2026-09-23

Who should care

Defenders responsible for WordPress installations with Classified Listing plugin should assess exposure and prioritize updates to prevent unauthorized access.

Why it matters

Defenders should care about CVE-2026-84217 because it allows unauthorized access to functionality in Classified Listing, potentially leading to security breaches. WordPress administrators and security teams should assess exposure, prioritize updates, and monitor for unauthorized access attempts.

Potential unauthorized access to functionality
Need to verify and update Classified Listing installations
Possible exploitation of missing authorization

Technical summary

The Classified Listing plugin for WordPress has a Missing Authorization vulnerability, allowing attackers to access functionality not properly constrained by ACLs. This issue affects Classified Listing from n/a through 6.1.1. The vulnerability allows unauthorized access to functionality, potentially leading to security breaches. WordPress administrators and security teams should assess exposure, prioritize updates, and monitor for unauthorized access attempts. The CVSS score is 5.4, and the severity is MEDIUM.

Defensive priority

Defenders should prioritize verifying and updating Classified Listing installations to prevent unauthorized access to functionality.

Recommended defensive actions

Verify Classified Listing installations for updates to version 6.1.1 or later
Restrict access to functionality based on ACLs
Monitor for unauthorized access attempts

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, but additional information on affected versions and remediation is needed. The vulnerability affects Classified Listing from n/a through 6.1.1. Defenders should verify and update installations to version 6.1.1 or later. The CVE record was published on 2026-09-02T12:17:13.900Z and has not been modified since then. The NVD entry provides official NIST NVD detail page and source-specific vulnerability assessment. The CVSS

Sources and references

Verified primary and authoritative sources

CVE-2026-84217 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2026-84217

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2026-84217 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2026-84217

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.