Skip to content
OpenAdvisories

Vendor

themeglow

6 known vulnerabilities.

Products

JobBoard Job listing 4 Property – Real Estate Directory Listing 1 Cleanup – Directory Listing & Classifieds WordPress Plugin 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-5117

    Property 1.0.5 - 1.0.6 - Missing Authorization to Authenticated (Author+) Privilege Escalation via property_package_user_role Metadata in PayPal Registration

    The Property plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the use of the property_package_user_role metadata in versions 1.0.5 to 1.0.6. This makes it possible for authenticated attackers, with Author‐level a…

    themeglow Property – Real Estate Directory Listing Web / CMS
  • High 7.1
    CVE-2025-24563

    WordPress Cleanup – Directory Listing & Classifieds plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeglow Cleanup – Directory Listing & Classifieds WordPress Plugin cleanup-light allows Reflected XSS.This issue affects Cleanup – Directory Listing & Clas…

    themeglow Cleanup – Directory Listing & Classifieds WordPress Plugin Web / CMS