48 matches found
CVE-2026-19796
The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsddisplstyle' Parameter in all versions up to, and including, 5.8.1 due to insufficient input sanitization and output escaping. This makes it possible f...
CVE-2026-19796
The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the lsd[displ][style] parameter in all versions up to and including 5.8.1 . The root cause is insufficient input sanitization and output escaping , allowi...
EUVD-2026-68967
The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsddisplstyle' Parameter in all versions up to, and including, 5.8.1 due to insufficient input sanitization and output escaping. This makes it possible f...
CVE-2026-19796 Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 5.8.1 - Unauthenticated Stored Cross-Site Scripting via 'lsd[displ][style]' Parameter
The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsddisplstyle' Parameter in all versions up to, and including, 5.8.1 due to insufficient input sanitization and output escaping. This makes it possible f...
WordPress Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin <= 5.8.1 - Unauthenticated Stored Cross-Site Scripting via 'lsd[displ][style]' Parameter vulnerability
Unauthenticated Stored Cross-Site Scripting via 'lsddisplstyle' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Listdom versions = 5.8.1...
CVE-2026-61969
Unauthenticated SQL Injection in Listdom = 5.6.0 versions...
CVE-2026-61969
Unauthenticated SQL Injection in Listdom = 5.6.0 versions...
CVE-2026-61969 WordPress Listdom plugin <= 5.6.0 - SQL Injection vulnerability
Unauthenticated SQL Injection in Listdom = 5.6.0 versions...
EUVD-2026-57973
Unauthenticated SQL Injection in Listdom = 5.6.0 versions...
CVE-2026-61969
CVE-2026-61969 concerns an unauthenticated SQL injection in the WordPress Listdom plugin. Affected: Listdom ≤ 5.6.0. Root cause: likely improper handling of input in a database query, enabling SQL injection without authentication. Impact (per CVSS): high confidentiality impact, low availability i...
PT-2026-71539
Unauthenticated SQL Injection in Listdom = 5.6.0 versions...
WordPress Listdom plugin <= 5.6.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Mrs Skelli in WordPress Plugin Listdom versions = 5.6.0...
CVE-2026-54819
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Webilia Inc. Listdom allows Blind SQL Injection. This issue affects Listdom: from n/a through 5.4.0...
EUVD-2026-37703
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Webilia Inc. Listdom allows Blind SQL Injection. This issue affects Listdom: from n/a through 5.4.0...
CVE-2026-54819
CVE-2026-54819 affects WordPress Listdom plugin (vendor: Webilia Inc.), vulnerable through versions up to 5.4.0 due to improper neutralization of SQL commands, enabling Blind SQL Injection. CVSS 3.1 base score 9.3 (CRITICAL); attack vector NETWORK, attack complexity LOW, privileges NONE, user int...
CVE-2026-49063
Unauthenticated Privilege Escalation in Listdom = 5.5.0 versions...
EUVD-2026-36871
Unauthenticated Privilege Escalation in Listdom = 5.5.0 versions...
CVE-2026-49063 WordPress Listdom plugin <= 5.5.0 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Listdom = 5.5.0 versions...
CVE-2026-49063
The CVE-2026-49063 entry concerns the WordPress Listdom plugin, versions up to 5.5.0, with an Unauthenticated Privilege Escalation vulnerability. The connected documents confirm the affected product (Listdom), the vulnerable versions (