Skip to content
OpenAdvisories
High · 8.0 CVE-2024-39621 EUVD-2024-38128GHSA-2jwr-937v-hx6p

WordPress ListingPro plugin <= 2.9.4 - Local File Inclusion vulnerability

Published Aug 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through <= 2.9.4.

Affected products

VendorProductAffectedFixed
CridioStudio ListingPro ≤ 2.9.4 —

References