TI-2020-18890 Aliases CVE-2020-36719 GHSA-vpf4-7pch-f7ph

ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Arbitrary Plugin Installation, Activation and Deactivation

MEDIUM 56CWE-862Published 2023-06-07 · Updated 2026-04-08

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-862.

Summary

The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Arbitrary Plugin Installation, Activation and Deactivation in versions before 2.6.1. This is due to a missing capability check on the lp_cc_addons_actions function. This makes it possible for unauthenticated attackers to arbitrarily install, activate and deactivate any plugin.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.04304 91st percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed ListingPro - WordPress Directory & Listing Theme: 2.6.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	ListingPro - WordPress Directory & Listing Theme	before 2.6.1	2.6.1	Patch available	CNA

ListingPro - WordPress Directory & Listing Theme Vendor— Affected before 2.6.1 Fixed in 2.6.1 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:cridio:listingpro::::::wordpress::*	up to 2.6.1	Vulnerable	CridioStudio

cpe:2.3:a:cridio:listingpro:*:*:*:*:*:wordpress:*:* Versions up to 2.6.1 Vulnerable ·CridioStudio

Remediation

Fix · CNA ListingPro - WordPress Directory & Listing Theme Fixed in 2.6.1

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Release · 2023-06-07
ListingPro - WordPress Directory & Listing Theme 2.6.1
2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2020-18894 ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Sensitive Information DisclosurePriority LOW 33
Show all 2 records →

Timeline

2026-10-02 Threatist record created from CVE-2020-36719
2026-10-03 Alias added: GHSA-vpf4-7pch-f7ph

References

TI-2024-26547 WordPress ListingPro theme <= 2.9.4 - Unauthenticated SQL Injection vulnerability CVSS 3.1CRITICAL 9.8
TI-2024-26028 WordPress ListingPro plugin <= 2.9.4 - Unauthenticated SQL Injection vulnerability CVSS 3.1CRITICAL 9.8
TI-2024-26544 WordPress ListingPro plugin <= 2.9.4 - Unauthenticated Local File Inclusion vulnerability CVSS 3.1CRITICAL 9.8
TI-2024-26549 WordPress ListingPro theme <= 2.9.4 - Local File Inclusion vulnerability CVSS 3.1HIGH 8.8
TI-2024-26548 WordPress ListingPro theme <= 2.9.4 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerability CVSS 3.1HIGH 8.8
TI-2024-26545 WordPress ListingPro plugin <= 2.9.4 - SQL Injection vulnerability CVSS 3.1HIGH 8.8

See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences