298 matches found
ListingPro < 2.6.1 - Sensitive Data Disclosure
The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the /listingpro-plugin/functions.php file. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, full names, email...
ListingPro < 2.6.1 - Arbitrary Plugin Installation/Activation/Deactivation
The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Arbitrary Plugin Installation, Activation and Deactivation in versions before 2.6.1. This is due to a missing capability check on the lpccaddonsactions function. This makes it possible for unauthenticated attacker...
CVE-2026-42414
Subscriber SQL Injection in ListingPro = 2.9.12 versions...
CVE-2026-42414
The ListingPro plugin for WordPress versions
CVE-2026-42414 WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerability
Subscriber SQL Injection in ListingPro = 2.9.12 versions...
CVE-2026-42414 WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerability
Subscriber SQL Injection in ListingPro = 2.9.12 versions...
EUVD-2026-93051
Subscriber SQL Injection in ListingPro = 2.9.12 versions...
CVE-2026-42414: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in ListingPro = 2.9.12 versions...
PT-2026-106473
Subscriber SQL Injection in ListingPro = 2.9.12 versions...
WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin ListingPro versions = 2.9.12...
ListingPro < 2.6.1 - Sensitive Data Disclosure Detection
The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the /listingpro-plugin/functions.php file. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, full names, email...
CVE-2026-65478
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...
CVE-2026-65478 WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...
CVE-2026-65478
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...
CVE-2026-65478 WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...
CVE-2026-65478
CVE-2026-65478 affects the WordPress ListingPro plugin (versions
PT-2026-63899
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...
CVE-2026-65478: Missing Authorization
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...