Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

27 records

Vendor: CridioStudio Clear all filters
TI-2026-68002 CVE-2026-42414 · GHSA-4gw2-v6wj-25x3

SQL injection in ListingPro WordPress plugin

Priority LOW 36

Subscriber SQL Injection in ListingPro <= 2.9.12 versions.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.0027 Published 2026-10-06 No fix listed CWE-89
TI-2025-42506 CVE-2025-69051 · GHSA-r9jr-2pjg-wwvc

WordPress ListingPro Reviews theme <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro Reviews listingpro-reviews allows Reflected XSS.This issue affects ListingPro Reviews: from n/…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2026-01-22 No fix listed CWE-79
TI-2025-39811 CVE-2025-64378 · GHSA-h52q-675m-rq36

WordPress ListingPro theme < 2.9.10 - Broken Access Control vulnerability

Priority LOW 37

Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through < 2.9.10.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00203 Published 2025-12-18 No fix listed CWE-862
TI-2025-39810 CVE-2025-64377 · GHSA-54rx-2gc4-7pwx

WordPress ListingPro theme < 2.9.10 - Local File Inclusion vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CridioStudio ListingPro listingpro allows PHP Local File Inclusion.This issue affects ListingPro: f…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00404 Published 2025-12-18 No fix listed CWE-98
TI-2025-39809 CVE-2025-64376 · GHSA-pjq9-7r7j-39gf

WordPress ListingPro theme < 2.9.10 - Cross Site Scripting (XSS) vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro listingpro allows Reflected XSS.This issue affects ListingPro: from n/a through < 2.9.10.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00178 Published 2025-12-18 No fix listed CWE-79
TI-2025-39187 CVE-2025-63039 · GHSA-cc2c-m325-gwh6

WordPress ListingPro theme <= 2.9.9 - Broken Access Control vulnerability

Priority LOW 28

Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through <= 2.9.9.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00252 Published 2025-12-18 No fix listed CWE-862
TI-2025-39197 CVE-2025-63049 · GHSA-mfr5-v73v-62qr

WordPress ListingPro Lead Form plugin <= 1.0.7 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in CridioStudio ListingPro Lead Form listingpro-lead-form allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ListingPro Lead Form: from n/a through <= 1…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00301 Published 2025-12-09 No fix listed CWE-862
TI-2025-39196 CVE-2025-63048 · GHSA-4p2g-f3r4-m384

WordPress ListingPro Lead Form plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro Lead Form listingpro-lead-form allows DOM-Based XSS.This issue affects ListingPro Lead Form: f…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00232 Published 2025-12-09 No fix listed CWE-79
TI-2025-39195 CVE-2025-63047 · GHSA-w3h5-chmf-jr89

WordPress ListingPro theme <= 2.9.9 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through <= 2.9.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00254 Published 2025-12-09 No fix listed CWE-862
TI-2025-39194 CVE-2025-63046 · GHSA-7679-3fj6-gr9w

WordPress ListingPro plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro listingpro-plugin allows DOM-Based XSS.This issue affects ListingPro: from n/a through <= 2.9.…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00258 Published 2025-12-09 No fix listed CWE-79
TI-2025-37469 CVE-2025-60103 · GHSA-gc52-rp4x-p95j

WordPress ListingPro plugin <= 2.9.8 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in CridioStudio ListingPro listingpro-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through <= 2.9.8.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00273 Published 2025-09-26 No fix listed CWE-862
TI-2025-36335 CVE-2025-58667 · GHSA-pc7p-jg96-v8xm

WordPress ListingPro Reviews plugin < 2.9.11 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in CridioStudio ListingPro Reviews listingpro-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro Reviews: from n/a through <…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00273 Published 2025-09-22 No fix listed CWE-862
TI-2024-26547 CVE-2024-39622 · GHSA-fr7q-6mh8-q5fp

WordPress ListingPro theme <= 2.9.4 - Unauthenticated SQL Injection vulnerability

Priority MEDIUM 48

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro allows SQL Injection.This issue affects ListingPro: from n/a through <= 2.9.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00458 Published 2024-08-29 No fix listed CWE-89
TI-2024-26545 CVE-2024-39620 · GHSA-g7m4-8h9g-f86c

WordPress ListingPro plugin <= 2.9.4 - SQL Injection vulnerability

Priority LOW 38

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro-plugin allows SQL Injection.This issue affects ListingPro: from n/a through <= 2.9.…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00441 Published 2024-08-29 No fix listed CWE-89
TI-2024-26028 CVE-2024-38795 · GHSA-2wj5-m5gf-xp7w

WordPress ListingPro plugin <= 2.9.4 - Unauthenticated SQL Injection vulnerability

Priority MEDIUM 48

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro-plugin allows SQL Injection.This issue affects ListingPro: from n/a through <= 2.9.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00458 Published 2024-08-29 No fix listed CWE-89
TI-2024-26544 CVE-2024-39619 · GHSA-2g9j-pxq8-pw9c

WordPress ListingPro plugin <= 2.9.4 - Unauthenticated Local File Inclusion vulnerability

Priority MEDIUM 44

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through <=…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00553 Published 2024-08-01 No fix listed CWE-22
TI-2024-26546 CVE-2024-39621 · GHSA-2jwr-937v-hx6p

WordPress ListingPro plugin <= 2.9.4 - Local File Inclusion vulnerability

Priority LOW 37

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through <=…

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.00521 Published 2024-08-01 No fix listed CWE-22
TI-2024-26549 CVE-2024-39624 · GHSA-824m-78xw-jp8w

WordPress ListingPro theme <= 2.9.4 - Local File Inclusion vulnerability

Priority MEDIUM 41

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through <= 2.9.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00525 Published 2024-08-01 No fix listed CWE-22
Load more