Skip to content
OpenAdvisories

Vendor

Cridio Studio

23 known vulnerabilities.

Products

ListingPro 18 ListingPro Reviews 2 ListingPro Lead Form 2 ClassifiedPro - reCommerce WordPress Theme 1
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 8.5
    CVE-2026-42414

    WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerability

    Subscriber SQL Injection in ListingPro <= 2.9.12 versions.

    Cridio Studio ListingPro
  • High 7.1
    CVE-2026-28122

    WordPress ListingPro plugin <= 2.9.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro listingpro-plugin allows Reflected XSS.This issue affects ListingPro: from n/a through <= 2.9.8.

    Cridio Studio ListingPro
  • High 7.1
    CVE-2025-69051

    WordPress ListingPro Reviews theme <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro Reviews listingpro-reviews allows Reflected XSS.This issue affects ListingPro Reviews: from n/a through < 2.9.11.

    Cridio Studio ListingPro Reviews
  • High 8.1
    CVE-2025-64377

    WordPress ListingPro theme < 2.9.10 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CridioStudio ListingPro listingpro allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through < 2.9.10.

    Cridio Studio ListingPro
  • High 7.1
    CVE-2025-64378

    WordPress ListingPro theme < 2.9.10 - Broken Access Control vulnerability

    Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through < 2.9.10.

    Cridio Studio ListingPro
  • High 7.1
    CVE-2025-64376

    WordPress ListingPro theme < 2.9.10 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro listingpro allows Reflected XSS.This issue affects ListingPro: from n/a through < 2.9.10.

    Cridio Studio ListingPro
  • High 8.8
    CVE-2025-10706

    Classified Pro <= 1.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation

    The Classified Pro theme for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check in the 'cwp_addons_update_plugin_cb' function in all versions up to, and including, 1.0.14. This makes it possible for authenticated att…

    Cridio Studio ClassifiedPro - reCommerce WordPress Theme Web / CMS
  • High 8.8
    CVE-2024-39623

    WordPress ListingPro theme <= 2.9.4 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in CridioStudio ListingPro listingpro allows Authentication Bypass.This issue affects ListingPro: from n/a through <= 2.9.4.

    Cridio Studio ListingPro
  • High 8.5
    CVE-2024-39620

    WordPress ListingPro plugin <= 2.9.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro-plugin allows SQL Injection.This issue affects ListingPro: from n/a through <= 2.9.4.

    Cridio Studio ListingPro
  • High 8.0
    CVE-2024-39621

    WordPress ListingPro plugin <= 2.9.4 - Local File Inclusion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through <= 2.9.4.

    Cridio Studio ListingPro
  • High 8.5
    CVE-2024-39624

    WordPress ListingPro theme <= 2.9.4 - Local File Inclusion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through <= 2.9.4.

    Cridio Studio ListingPro