WordPress ListingPro premium theme <= 2.5.3 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

2020-01-1500:00:00

m0ze

patchstack.com

Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability discovered by m0ze in WordPress ListingPro premium theme (versions <= 2.5.3).

Solution

           Update the WordPress ListingPro premium theme to the latest available version (at least 2.5.4).

listingprowp.com/update-logs/