Vulnerabilities

TI-2020-18894 CVE-2020-36723 · GHSA-r88m-vgvq-wfmf

ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Sensitive Information Disclosure

LOW 33

The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the ~/listingpro-plugin/functions.php file.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01608 Published 2023-06-07 Fixed in 2.6.1 CWE-200

TI-2020-18890 CVE-2020-36719 · GHSA-vpf4-7pch-f7ph

ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Arbitrary Plugin Installation, Activation and Deactivation

MEDIUM 56

The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Arbitrary Plugin Installation, Activation and Deactivation in versions before 2.6.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04304 Published 2023-06-07 Fixed in 2.6.1 CWE-862

Vulnerabilities

Filters

ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Sensitive Information Disclosure

ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Arbitrary Plugin Installation, Activation and Deactivation