CVE-2025-63046

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro listingpro-plugin allows DOM-Based XSS.This issue affects ListingPro: from n/a through = 2.9.9...

EUVD-2025-201979

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro Lead Form listingpro-lead-form allows DOM-Based XSS.This issue affects ListingPro Lead Form: from n/a through = 1.0.2...

PT-2025-50051

Missing Authorization vulnerability in CridioStudio ListingPro Lead Form listingpro-lead-form allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ListingPro Lead Form: from n/a through = 1.0.2...

PT-2025-50049

Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through = 2.9.9...

EUVD-2024-38128

Malicious code in bioql PyPI...

EUVD-2024-38127

Malicious code in bioql PyPI...

EUVD-2024-38129

Malicious code in bioql PyPI...

EUVD-2024-37631

Malicious code in bioql PyPI...

EUVD-2025-31297

Malicious code in bioql PyPI...

EUVD-2024-38126

Malicious code in bioql PyPI...

EUVD-2024-38130

Malicious code in bioql PyPI...

PT-2025-39550

Name of the Vulnerable Software and Affected Versions CridioStudio ListingPro versions through 2.9.8 Description An authorization issue exists in CridioStudio ListingPro due to incorrectly configured access control security levels. This allows for exploitation of the system. Recommendations Updat...

CVE-2025-58667

Missing Authorization vulnerability in CridioStudio ListingPro Reviews listingpro-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro Reviews: from n/a through 2.9.11...

CVE-2025-58667

Missing Authorization vulnerability in CridioStudio ListingPro Reviews listingpro-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro Reviews: from n/a through 2.9.11...

CVE-2024-38795

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CridioStudio ListingPro listingpro-plugin allows SQL Injection.This issue affects ListingPro: from n/a through = 2.9.4...

CVE-2024-39623

Cross-Site Request Forgery CSRF vulnerability in CridioStudio ListingPro listingpro allows Authentication Bypass.This issue affects ListingPro: from n/a through = 2.9.4...

CVE-2024-39624

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in CridioStudio ListingPro listingpro allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through = 2.9.4...

CVE-2024-39623

Cross-Site Request Forgery CSRF vulnerability in CridioStudio ListingPro allows Authentication Bypass.This issue affects ListingPro: from n/a through 2.9.4...

CVE-2024-39623

Cross-Site Request Forgery CSRF vulnerability in CridioStudio ListingPro listingpro allows Authentication Bypass.This issue affects ListingPro: from n/a through = 2.9.4...

PT-2025-2550 · Cridiostudio · Cridiostudio Listingpro

Name of the Vulnerable Software and Affected Versions: CridioStudio ListingPro versions n/a through 2.9.4 Description: A Cross-Site Request Forgery CSRF issue allows authentication bypass. This means an attacker can perform actions on behalf of a user without their knowledge or consent. The...