Skip to content
OpenAdvisories

Product · Cridio Studio

ListingPro

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 8.5
    CVE-2026-42414

    WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerability

    Subscriber SQL Injection in ListingPro <= 2.9.12 versions.

    Cridio Studio ListingPro
  • High 7.1
    CVE-2026-28122

    WordPress ListingPro plugin <= 2.9.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro listingpro-plugin allows Reflected XSS.This issue affects ListingPro: from n/a through <= 2.9.8.

    Cridio Studio ListingPro
  • High 8.1
    CVE-2025-64377

    WordPress ListingPro theme < 2.9.10 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CridioStudio ListingPro listingpro allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through < 2.9.10.

    Cridio Studio ListingPro
  • High 7.1
    CVE-2025-64378

    WordPress ListingPro theme < 2.9.10 - Broken Access Control vulnerability

    Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through < 2.9.10.

    Cridio Studio ListingPro
  • High 7.1
    CVE-2025-64376

    WordPress ListingPro theme < 2.9.10 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro listingpro allows Reflected XSS.This issue affects ListingPro: from n/a through < 2.9.10.

    Cridio Studio ListingPro
  • High 8.8
    CVE-2024-39623

    WordPress ListingPro theme <= 2.9.4 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in CridioStudio ListingPro listingpro allows Authentication Bypass.This issue affects ListingPro: from n/a through <= 2.9.4.

    Cridio Studio ListingPro
  • High 8.5
    CVE-2024-39620

    WordPress ListingPro plugin <= 2.9.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro-plugin allows SQL Injection.This issue affects ListingPro: from n/a through <= 2.9.4.

    Cridio Studio ListingPro
  • High 8.0
    CVE-2024-39621

    WordPress ListingPro plugin <= 2.9.4 - Local File Inclusion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through <= 2.9.4.

    Cridio Studio ListingPro
  • High 8.5
    CVE-2024-39624

    WordPress ListingPro theme <= 2.9.4 - Local File Inclusion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through <= 2.9.4.

    Cridio Studio ListingPro