CVE-2025-64377

CVE-2025-64377 is a Local File Inclusion vulnerability in the WordPress ListingPro theme for versions prior to 2.9.10, caused by improper filename control in include/require statements in PHP. The issue affects ListingPro: from n/a through

WordPress ListingPro theme < 2.9.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme ListingPro versions 2.9.10...