Browse CVEs

HIGH 8.8 CVE-2024-39623 Cross-Site Request Forgery (CSRF) vulnerability in CridioStudio ListingPro listingpro allows Authentication Bypass.This issue affects ListingPro: fro… Listingpro 2.9.5+ Fix from $1,9502025-01-02 CRITICAL 9.8 CVE-2024-38795 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro-plugin allow… Listingpro after 2.9.4 Fix from $2,3002024-08-29 CRITICAL 9.8 CVE-2024-39622 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro allows SQL I… Listingpro after 2.9.4 Fix from $2,3002024-08-29 HIGH 8.8 CVE-2024-39620 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro-plugin allow… Listingpro after 2.9.4 Fix from $1,9502024-08-29 HIGH 8.8 CVE-2024-39624 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro allows PHP Local F… Listingpro 2.9.5+ Fix from $1,9502024-08-01 HIGH 7.2 CVE-2024-39621 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP … Listingpro 2.9.5+ Fix from $1,9502024-08-01 CRITICAL 9.8 CVE-2024-39619 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP … Listingpro 2.9.5+ Fix from $2,3002024-08-01 CRITICAL 9.8 CVE-2020-36719 The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Arbitrary Plugin Installation, Activation and Deactivation in ver… Listingpro after 2.6.1 Fix from $2,3002023-06-07 MEDIUM 5.3 CVE-2020-36723 The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the ~/listin… Listingpro 2.6.1+ Fix from $1,6002023-06-07 MEDIUM 6.1 CVE-2019-19540 The ListingPro theme before v2.0.14.2 for WordPress has Reflected XSS via the What field on the homepage. Listingpro 2.0.14.2+ Fix from $1,6002019-12-26 MEDIUM 5.4 CVE-2019-19541 The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Best Day/Night field on the new listing submit page. Listingpro 2.0.14.2+ Fix from $1,6002019-12-26 MEDIUM 5.4 CVE-2019-19542 The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Good For field on the new listing submit page. Listingpro 2.0.14.2+ Fix from $1,6002019-12-26