Vulnerabilities

TI-2026-70247 CVE-2026-104722 · GHSA-mw8f-j9wh-2wfv

Path traversal in Listdom WordPress plugin enables file deletion

LOW 23

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the LSD_Menus_IX_CSV::import function in…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00651 Published 2026-10-10 No fix listed CWE-22

TI-2026-65985 CVE-2026-96647 · GHSA-gwjj-9h2j-mhf4

Cross-site scripting in Webilia Inc. Listdom: AI-powered Business Directory with…

LOW 28

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsd[remark]' Parameter in all versions up to, and including, 6.1.1 due to in…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00195 Published 2026-10-02 No fix listed CWE-79

TI-2026-16057 CVE-2026-19796 · GHSA-v8jg-5wqw-2fv7

Cross-site scripting in Webilia Inc. Listdom: AI-powered Business Directory with…

LOW 38

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsd[displ][style]' Parameter in all versions up to, and including, 5.8.1 due…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00419 Published 2026-09-01 No fix listed CWE-79

TI-2026-44341 CVE-2026-61969 · GHSA-jwwc-mm97-jw9v

WordPress Listdom plugin <= 5.6.0 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in Listdom <= 5.6.0 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.004 Published 2026-08-13 No fix listed CWE-89

TI-2026-39622 CVE-2026-54819 · GHSA-xf4g-vccx-7pf9

WordPress Listdom plugin <= 5.4.0 - SQL Injection vulnerability

MEDIUM 45

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webilia Inc.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00229 Published 2026-06-17 No fix listed CWE-89

TI-2026-36289 CVE-2026-49063 · GHSA-g5vj-vrxx-7p65

WordPress Listdom plugin <= 5.5.0 - Privilege Escalation vulnerability

LOW 37

Unauthenticated Privilege Escalation in Listdom <= 5.5.0 versions.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00213 Published 2026-06-15 No fix listed CWE-266

TI-2026-03765 CVE-2026-4326 · GHSA-2m2r-mrjh-fhc4

Missing authorization in Webilia Inc. Vertex Addons for Elementor

LOW 39

The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00588 Published 2026-04-09 No fix listed CWE-862

TI-2026-20516 CVE-2026-25398 · GHSA-jxf3-hm6h-rx8c

WordPress Vertex Addons for Elementor plugin <= 1.6.4 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in Webilia Inc.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00304 Published 2026-03-25 No fix listed CWE-862

TI-2025-41314 CVE-2025-67560 · GHSA-wj54-qjrq-9gwv

WordPress Listdom plugin <= 5.0.1 - Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in Webilia Inc.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0027 Published 2025-12-09 No fix listed CWE-862

TI-2025-26341 CVE-2025-39599 · GHSA-c43m-gvgr-chxv

WordPress Listdom plugin <= 4.0.0 - Open Redirection Vulnerability

LOW 22

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Webilia Inc.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00426 Published 2025-04-16 No fix listed CWE-601

TI-2025-19685 CVE-2025-26769 · GHSA-pgp6-g4pq-v8q7

WordPress Vertex Addons for Elementor plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webilia Inc.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00234 Published 2025-02-17 No fix listed CWE-79

TI-2024-10997 CVE-2024-11854 · GHSA-j6g6-p3mj-r2m2

Cross-site scripting in Webilia Inc. Listdom: AI-powered Business Directory with…

LOW 28

The Listdom – Business Directory and Classified Ads Listings WordPress Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘shortcode’ parameter in all versions up to, and including, 3.7.0 du…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00308 Published 2024-12-04 No fix listed CWE-79

Vulnerabilities

Filters