Advisories · Technology

CridioStudio ListingPro.

Every CVE that names CridioStudio ListingPro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-42414 CVE record

CVSS 8.5 High

WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerability
- CridioStudio ListingPro
- SQL injection
Not analysed yet 6 Oct 2026
CVE-2026-65478 CVE record

CVSS 5.4 Medium

WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability
- CridioStudio ListingPro
- Broken access control
Not analysed yet 23 Jul 2026
CVE-2026-56046 CVE record

CVSS 6.5 Medium

WordPress ListingPro theme <= 2.9.11 - Cross Site Scripting (XSS) vulnerability
- CridioStudio ListingPro
- Cross-site scripting (XSS)
Not analysed yet 26 Jun 2026
CVE-2026-28122 CVE record

CVSS 7.1 High

WordPress ListingPro plugin <= 2.9.8 - Reflected Cross Site Scripting (XSS) vulnerability
- CridioStudio ListingPro
- Cross-site scripting (XSS)
Not analysed yet 5 Mar 2026
CVE-2025-64378 CVE record

CVSS 7.1 High

WordPress ListingPro theme < 2.9.10 - Broken Access Control vulnerability
- CridioStudio ListingPro
- Broken access control
Not analysed yet 18 Dec 2025
CVE-2025-64377 CVE record

CVSS 8.1 High

WordPress ListingPro theme < 2.9.10 - Local File Inclusion vulnerability
- CridioStudio ListingPro
- File inclusion
Not analysed yet 18 Dec 2025
CVE-2025-64376 CVE record

CVSS 7.1 High

WordPress ListingPro theme < 2.9.10 - Cross Site Scripting (XSS) vulnerability
- CridioStudio ListingPro
- Cross-site scripting (XSS)
Not analysed yet 18 Dec 2025
CVE-2025-63039 CVE record

CVSS 6.5 Medium

WordPress ListingPro theme <= 2.9.9 - Broken Access Control vulnerability
- CridioStudio ListingPro
- Broken access control
Not analysed yet 18 Dec 2025
CVE-2025-63047 CVE record

CVSS 5.3 Medium

WordPress ListingPro theme <= 2.9.9 - Broken Access Control vulnerability
- CridioStudio ListingPro
- Broken access control
Not analysed yet 9 Dec 2025
CVE-2025-63046 CVE record

CVSS 6.5 Medium

WordPress ListingPro plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability
- CridioStudio ListingPro
- Cross-site scripting (XSS)
Not analysed yet 9 Dec 2025
CVE-2025-60103 CVE record

CVSS 5.4 Medium

WordPress ListingPro plugin <= 2.9.8 - Broken Access Control vulnerability
- CridioStudio ListingPro
- Broken access control
Not analysed yet 26 Sept 2025
CVE-2024-39623 CVE record

CVSS 8.8 High

WordPress ListingPro theme <= 2.9.4 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerability
- CridioStudio ListingPro
- Cross-site request forgery (CSRF)
Not analysed yet 2 Jan 2025
CVE-2024-39622 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress ListingPro theme <= 2.9.4 - Unauthenticated SQL Injection vulnerability
- CridioStudio ListingPro
- SQL injection
Not analysed yet 29 Aug 2024
CVE-2024-39620 CVE record

CVSS 8.5 High

WordPress ListingPro plugin <= 2.9.4 - SQL Injection vulnerability
- CridioStudio ListingPro
- SQL injection
Not analysed yet 29 Aug 2024
CVE-2024-38795 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress ListingPro plugin <= 2.9.4 - Unauthenticated SQL Injection vulnerability
- CridioStudio ListingPro
- SQL injection
Not analysed yet 29 Aug 2024
CVE-2024-39619 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

WordPress ListingPro plugin <= 2.9.4 - Unauthenticated Local File Inclusion vulnerability
- CridioStudio ListingPro
- Path traversal
Not analysed yet 1 Aug 2024
CVE-2024-39621 CVE record

CVSS 8.0 High

WordPress ListingPro plugin <= 2.9.4 - Local File Inclusion vulnerability
- CridioStudio ListingPro
- Path traversal
Not analysed yet 1 Aug 2024
CVE-2024-39624 CVE record

CVSS 8.5 High

WordPress ListingPro theme <= 2.9.4 - Local File Inclusion vulnerability
- CridioStudio ListingPro
- Path traversal
Not analysed yet 1 Aug 2024