Read the docs

CridioStudio

Records27All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

CridioStudio records in CISA KEV

No CridioStudio vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Listingpro 12 records MEDIUM

Records

27 records

TI-2024-26547 CVE-2024-39622 · GHSA-fr7q-6mh8-q5fp

WordPress ListingPro theme <= 2.9.4 - Unauthenticated SQL Injection vulnerability

Priority MEDIUM 48

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro allows SQL Injection.This issue affects ListingPro: from n/a through <= 2.9.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00458 Published 2024-08-29 No fix listed CWE-89
TI-2024-26028 CVE-2024-38795 · GHSA-2wj5-m5gf-xp7w

WordPress ListingPro plugin <= 2.9.4 - Unauthenticated SQL Injection vulnerability

Priority MEDIUM 48

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro-plugin allows SQL Injection.This issue affects ListingPro: from n/a through <= 2.9.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00458 Published 2024-08-29 No fix listed CWE-89
TI-2024-26544 CVE-2024-39619 · GHSA-2g9j-pxq8-pw9c

WordPress ListingPro plugin <= 2.9.4 - Unauthenticated Local File Inclusion vulnerability

Priority MEDIUM 44

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through <=…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00553 Published 2024-08-01 No fix listed CWE-22
TI-2024-26549 CVE-2024-39624 · GHSA-824m-78xw-jp8w

WordPress ListingPro theme <= 2.9.4 - Local File Inclusion vulnerability

Priority MEDIUM 41

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through <= 2.9.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00525 Published 2024-08-01 No fix listed CWE-22
TI-2024-26545 CVE-2024-39620 · GHSA-g7m4-8h9g-f86c

WordPress ListingPro plugin <= 2.9.4 - SQL Injection vulnerability

Priority LOW 38

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro-plugin allows SQL Injection.This issue affects ListingPro: from n/a through <= 2.9.…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00441 Published 2024-08-29 No fix listed CWE-89
TI-2025-39811 CVE-2025-64378 · GHSA-h52q-675m-rq36

WordPress ListingPro theme < 2.9.10 - Broken Access Control vulnerability

Priority LOW 37

Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through < 2.9.10.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00203 Published 2025-12-18 No fix listed CWE-862
TI-2025-39810 CVE-2025-64377 · GHSA-54rx-2gc4-7pwx

WordPress ListingPro theme < 2.9.10 - Local File Inclusion vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CridioStudio ListingPro listingpro allows PHP Local File Inclusion.This issue affects ListingPro: f…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00404 Published 2025-12-18 No fix listed CWE-98
TI-2024-26546 CVE-2024-39621 · GHSA-2jwr-937v-hx6p

WordPress ListingPro plugin <= 2.9.4 - Local File Inclusion vulnerability

Priority LOW 37

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through <=…

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.00521 Published 2024-08-01 No fix listed CWE-22
TI-2026-68002 CVE-2026-42414 · GHSA-4gw2-v6wj-25x3

SQL injection in ListingPro WordPress plugin

Priority LOW 36

Subscriber SQL Injection in ListingPro <= 2.9.12 versions.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.0027 Published 2026-10-06 No fix listed CWE-89
TI-2025-42506 CVE-2025-69051 · GHSA-r9jr-2pjg-wwvc

WordPress ListingPro Reviews theme <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro Reviews listingpro-reviews allows Reflected XSS.This issue affects ListingPro Reviews: from n/…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2026-01-22 No fix listed CWE-79
TI-2025-39809 CVE-2025-64376 · GHSA-pjq9-7r7j-39gf

WordPress ListingPro theme < 2.9.10 - Cross Site Scripting (XSS) vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro listingpro allows Reflected XSS.This issue affects ListingPro: from n/a through < 2.9.10.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00178 Published 2025-12-18 No fix listed CWE-79
TI-2025-39197 CVE-2025-63049 · GHSA-mfr5-v73v-62qr

WordPress ListingPro Lead Form plugin <= 1.0.7 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in CridioStudio ListingPro Lead Form listingpro-lead-form allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ListingPro Lead Form: from n/a through <= 1…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00301 Published 2025-12-09 No fix listed CWE-862
TI-2025-39195 CVE-2025-63047 · GHSA-w3h5-chmf-jr89

WordPress ListingPro theme <= 2.9.9 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through <= 2.9.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00254 Published 2025-12-09 No fix listed CWE-862
TI-2025-39196 CVE-2025-63048 · GHSA-4p2g-f3r4-m384

WordPress ListingPro Lead Form plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro Lead Form listingpro-lead-form allows DOM-Based XSS.This issue affects ListingPro Lead Form: f…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00232 Published 2025-12-09 No fix listed CWE-79
TI-2025-39194 CVE-2025-63046 · GHSA-7679-3fj6-gr9w

WordPress ListingPro plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro listingpro-plugin allows DOM-Based XSS.This issue affects ListingPro: from n/a through <= 2.9.…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00258 Published 2025-12-09 No fix listed CWE-79
TI-2025-39187 CVE-2025-63039 · GHSA-cc2c-m325-gwh6

WordPress ListingPro theme <= 2.9.9 - Broken Access Control vulnerability

Priority LOW 28

Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through <= 2.9.9.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00252 Published 2025-12-18 No fix listed CWE-862
Load more
Open these records in search →