Input validation vulnerability in Classified Listing – Classified ads & Business Directory Plugin 4.2.0

The Classified Listing plugin for WordPress has a security issue in versions 4.2.0 and below. This means that people who have contributor-level access or higher can access and run any files on the server. This can be used to get around security measures, get private information, or run code in situations where only certain types of files, like images, are allowed to be uploaded and used.