CVE-2025-12882

Clasifico Listing <= 2.0 - Unauthenticated Privilege Escalation

Published Feb 19, 2026 CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Description

The Clasifico Listing plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.0. This is due to the plugin allowing users who are registering new accounts to set their own role by supplying the 'listing_user_role' parameter. This makes it possible for unauthenticated attackers to gain elevated privileges by registering an account with the administrator role.

Analysis

Technical impact

The vulnerability allows an attacker who has no existing credentials to register a new account by supplying the 'listing_user_role' parameter and assigning the highest available role. This results in the account gaining full administrator privileges, providing the attacker complete control over the WordPress site including content, settings, and other users.

Affected Systems

The affected product is the SmartDataSoft Clasifico Listing WordPress plugin, all released versions up to and including 2.0 are impacted.

Risk and Exploitability

The CVSS score of 9.8 marks it as critical, and although the EPSS score is under 1% and it is not current in the CISA KEV catalog, the flaw is exploitable with no authentication required. An attacker only needs to craft a registration request containing the privileged role parameter to create an admin user and gain privileged access.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

SmartDataSoft

Clasifico Listing

unaffected

Version	Status	Constraints
`0`	affected	≤ 2.0

No data.

Vendor Product Versions

Smartdatasoft

Clasifico Listing

Version	Status	Scheme	Platform
`[0,2.0]`	affected	semver	—

Wordpress

Version	Status	Scheme	Platform
`—`	unaffected	—	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade the plugin to a version newer than 2.0 where the role selection during registration is removed.
If an upgrade is not immediately possible, disable new user registrations or strip the 'listing_user_role' parameter from the signup process so that unauthenticated users cannot influence their role.
Audit the site’s user accounts for any administrator accounts that may have been created through the exploit and remove or reassign them as needed.

Generated by OpenCVE AI on April 21, 2026 at 15:57 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.491% probability within 30 days)

Exploitation none

Automatable yes

Technical Impact total

References

Link	Providers
https://themeforest.net/item/clasifico-classified-ads-wordpress-theme/33539482
https://www.wordfence.com/threat-intel/vulnerabilities/id/70fb90f0-1ca4-41fe-8638-cdd05747adae?source=cve

History

Feb 20, 2026 1:15 AM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Feb 19, 2026 10:30 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Smartdatasoft Smartdatasoft clasifico Listing Wordpress Wordpress wordpress
Vendors & Products		Smartdatasoft Smartdatasoft clasifico Listing Wordpress Wordpress wordpress

Feb 19, 2026 4:15 AM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		The Clasifico Listing plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.0. This is due to the plugin allowing users who are registering new accounts to set their own role by supplying the 'listing_user_role' parameter. This makes it possible for unauthenticated attackers to gain elevated privileges by registering an account with the administrator role.
Title		Clasifico Listing <= 2.0 - Unauthenticated Privilege Escalation
Weaknesses		CWE-269
References		https://themeforest.net/item/clasifico-classified-ads-wordpress-theme/33539482 https://www.wordfence.com/threat-intel/vulnerabilities/id/70fb90f0-1ca4-41fe-8638-cdd05747adae?source=cve
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`