284 matches found
ListingPro < 2.6.1 - Arbitrary Plugin Installation/Activation/Deactivation
The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Arbitrary Plugin Installation, Activation and Deactivation in versions before 2.6.1. This is due to a missing capability check on the lpccaddonsactions function. This makes it possible for unauthenticated attacker...
ListingPro < 2.6.1 - Sensitive Data Disclosure
The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the /listingpro-plugin/functions.php file. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, full names, email...
CVE-2026-65478
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...
CVE-2026-65478 WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...
CVE-2026-65478
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...
CVE-2026-65478
CVE-2026-65478 affects the WordPress ListingPro plugin (versions
CVE-2026-65478 WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...
CVE-2026-65478: Missing Authorization
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...
PT-2026-63899
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...
WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Phat RiO in WordPress Plugin ListingPro versions = 2.9.10...
CVE-2026-56046
Subscriber Cross Site Scripting XSS in ListingPro = 2.9.11 versions...
CVE-2026-56046 WordPress ListingPro theme <= 2.9.11 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in ListingPro = 2.9.11 versions...
CVE-2026-56046
CVE-2026-56046 affects the WordPress theme ListingPro versions ≤ 2.9.11 . The entry identifies a Subscriber Cross Site Scripting (XSS) vulnerability in ListingPro, with CVSS 3.1 base score 6.5 (MEDIUM) , indicating user interaction required and low privileges with network attack vector. The attac...
EUVD-2026-39707
Subscriber Cross Site Scripting XSS in ListingPro = 2.9.11 versions...
CVE-2026-56046 WordPress ListingPro theme <= 2.9.11 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in ListingPro = 2.9.11 versions...
CVE-2026-56046: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in ListingPro = 2.9.11 versions...
PT-2026-52760
Subscriber Cross Site Scripting XSS in ListingPro = 2.9.11 versions...
WordPress ListingPro theme <= 2.9.11 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Theme ListingPro versions = 2.9.11...