299 matches found
ListingPro < 2.6.1 - Arbitrary Plugin Installation/Activation/Deactivation
The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Arbitrary Plugin Installation, Activation and Deactivation in versions before 2.6.1. This is due to a missing capability check on the lpccaddonsactions function. This makes it possible for unauthenticated attacker...
ListingPro < 2.6.1 - Sensitive Data Disclosure
The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the /listingpro-plugin/functions.php file. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, full names, email...
CVE-2026-42414
Subscriber SQL Injection in ListingPro = 2.9.12 versions...
CVE-2026-42414 WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerability
Subscriber SQL Injection in ListingPro = 2.9.12 versions...
EUVD-2026-93051
Subscriber SQL Injection in ListingPro = 2.9.12 versions...
CVE-2026-42414
The ListingPro plugin for WordPress versions
CVE-2026-42414 WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerability
Subscriber SQL Injection in ListingPro = 2.9.12 versions...
CVE-2026-42414: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in ListingPro = 2.9.12 versions...
WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin ListingPro versions = 2.9.12...
PT-2026-106473
Name of the Vulnerable Software and Affected Versions ListingPro versions prior to 2.9.13 Description The ListingPro Plugin for WordPress contains a flaw where insufficient escaping of user-supplied parameters and lack of proper preparation of SQL queries allow authenticated attackers with...
ListingPro < 2.6.1 - Sensitive Data Disclosure Detection
The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the /listingpro-plugin/functions.php file. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, full names, email...
ListingPro < 2.6.1 - Arbitrary Plugin Installation/Activation/Deactivation Detection
The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Arbitrary Plugin Installation, Activation and Deactivation in versions before 2.6.1. This is due to a missing capability check on the lpccaddonsactions function. This makes it possible for unauthenticated attacker...
CVE-2026-65478
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...
CVE-2026-65478 WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...
CVE-2026-65478 WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...
CVE-2026-65478
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...
CVE-2026-65478
CVE-2026-65478 affects the WordPress ListingPro plugin (versions
CVE-2026-65478: Missing Authorization
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...