High · 8.8 CVE-2024-39623 EUVD-2024-38016GHSA-46v9-776w-chff

WordPress ListingPro theme <= 2.9.4 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerability

Published Jan 2, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Cridio Studio Product: ListingPro

Description

Cross-Site Request Forgery (CSRF) vulnerability in CridioStudio ListingPro listingpro allows Authentication Bypass.This issue affects ListingPro: from n/a through <= 2.9.4.

Affected products

Vendor	Product	Affected	Fixed
CridioStudio	ListingPro	≤ 2.9.4	—

References

https://patchstack.com/database/Wordpress/Theme/listingpro/vulnerability/wordpress-listingpro-theme-2-9-3-cross-site-request-forgery-csrf-to-account-takeover-vulnerability?_s_id=cve vdb-entry