What’s Vulnerable › Products

CridioStudio ListingPro vulnerabilities

23 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your CridioStudio ListingPro version is affected

Latest CridioStudio ListingPro vulnerabilities

• CVE-2026-42414 — WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerability (CVSS 8.5)
• CVE-2026-65478 — WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability (CVSS 5.4)
• CVE-2026-56046 — WordPress ListingPro theme <= 2.9.11 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2026-28122 — WordPress ListingPro plugin <= 2.9.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-64378 — WordPress ListingPro theme < 2.9.10 - Broken Access Control vulnerability (CVSS 7.1)
• CVE-2025-64377 — WordPress ListingPro theme < 2.9.10 - Local File Inclusion vulnerability (CVSS 8.1)
• CVE-2025-64376 — WordPress ListingPro theme < 2.9.10 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-63039 — WordPress ListingPro theme <= 2.9.9 - Broken Access Control vulnerability (CVSS 6.5)
• CVE-2025-63047 — WordPress ListingPro theme <= 2.9.9 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2025-63046 — WordPress ListingPro plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-60103 — WordPress ListingPro plugin <= 2.9.8 - Broken Access Control vulnerability (CVSS 5.4)
• CVE-2024-39623 — WordPress ListingPro theme <= 2.9.4 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerability (CVSS 8.8)
• CVE-2024-39622 — WordPress ListingPro theme <= 2.9.4 - Unauthenticated SQL Injection vulnerability (CVSS 9.8)
• CVE-2024-39620 — WordPress ListingPro plugin <= 2.9.4 - SQL Injection vulnerability (CVSS 8.8)
• CVE-2024-38795 — WordPress ListingPro plugin <= 2.9.4 - Unauthenticated SQL Injection vulnerability (CVSS 9.8)
• CVE-2024-39624 — WordPress ListingPro theme <= 2.9.4 - Local File Inclusion vulnerability (CVSS 8.8)
• CVE-2024-39621 — WordPress ListingPro plugin <= 2.9.4 - Local File Inclusion vulnerability (CVSS 7.2)
• CVE-2024-39619 — WordPress ListingPro plugin <= 2.9.4 - Unauthenticated Local File Inclusion vulnerability (CVSS 9.8)
• CVE-2020-36723 — ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Sensitive Information Disclosure (CVSS 5.3)
• CVE-2020-36719 — ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Arbitrary Plugin Installation, Activation and Deactivation (CVSS 9.8)
• CVE-2019-19542 — (CVSS 5.4)
• CVE-2019-19541 — (CVSS 5.4)
• CVE-2019-19540 — (CVSS 6.1)