Skip to content
OpenAdvisories
Critical · 9.0 CVE-2024-39619 EUVD-2024-38126GHSA-2g9j-pxq8-pw9c

WordPress ListingPro plugin <= 2.9.4 - Unauthenticated Local File Inclusion vulnerability

Published Aug 1, 2024 · Updated May 11, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through <= 2.9.4.

Affected products

VendorProductAffectedFixed
CridioStudio ListingPro ≤ 2.9.4 —

References