Skip to content
OpenAdvisories

Vendor

Cridio Studio

23 known vulnerabilities.

Products

ListingPro 18 ListingPro Reviews 2 ListingPro Lead Form 2 ClassifiedPro - reCommerce WordPress Theme 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-65478

    WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability

    Subscriber Broken Access Control in ListingPro <= 2.9.10 versions.

    Cridio Studio ListingPro
  • Medium 6.5
    CVE-2026-56046

    WordPress ListingPro theme <= 2.9.11 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in ListingPro <= 2.9.11 versions.

    Cridio Studio ListingPro
  • Medium 6.5
    CVE-2025-63039

    WordPress ListingPro theme <= 2.9.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through <= 2.9.9.

    Cridio Studio ListingPro
  • Medium 5.3
    CVE-2025-63047

    WordPress ListingPro theme <= 2.9.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through <= 2.9.9.

    Cridio Studio ListingPro
  • Medium 6.5
    CVE-2025-63046

    WordPress ListingPro plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro listingpro-plugin allows DOM-Based XSS.This issue affects ListingPro: from n/a through <= 2.9.9.

    Cridio Studio ListingPro
  • Medium 5.3
    CVE-2025-63049

    WordPress ListingPro Lead Form plugin <= 1.0.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in CridioStudio ListingPro Lead Form listingpro-lead-form allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ListingPro Lead Form: from n/a through <= 1.0.7.

    Cridio Studio ListingPro Lead Form
  • Medium 6.5
    CVE-2025-63048

    WordPress ListingPro Lead Form plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro Lead Form listingpro-lead-form allows DOM-Based XSS.This issue affects ListingPro Lead Form: from n/a through <= 1.0.7.

    Cridio Studio ListingPro Lead Form
  • Medium 5.4
    CVE-2025-60103

    WordPress ListingPro plugin <= 2.9.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in CridioStudio ListingPro listingpro-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through <= 2.9.8.

    Cridio Studio ListingPro
  • Medium 5.4
    CVE-2025-58667

    WordPress ListingPro Reviews plugin < 2.9.11 - Broken Access Control vulnerability

    Missing Authorization vulnerability in CridioStudio ListingPro Reviews listingpro-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro Reviews: from n/a through < 2.9.11.

    Cridio Studio ListingPro Reviews