Lucene search
+L

32 matches found

Cvelist
Cvelist
•added 2026/07/23 11:18 a.m.•39 views

CVE-2026-65478 WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability

Subscriber Broken Access Control in ListingPro = 2.9.10 versions...

5.4CVSS0.0023EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/23 11:18 a.m.•12 views

CVE-2026-65478 WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability

Subscriber Broken Access Control in ListingPro = 2.9.10 versions...

5.4CVSS5.2AI score0.0023EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/04/21 2:25 p.m.•15 views

WordPress ListingPro plugin <= 2.9.10 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Phat RiO in WordPress Plugin ListingPro versions = 2.9.10...

5.8AI score0.004EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2026/03/05 6:30 a.m.•17 views

EUVD-2026-9774

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro listingpro-plugin allows Reflected XSS.This issue affects ListingPro: from n/a through = 2.9.8...

7.1CVSS5.9AI score0.00251EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/05 6:16 a.m.•20 views

CVE-2026-28122

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro listingpro-plugin allows Reflected XSS.This issue affects ListingPro: from n/a through = 2.9.8...

7.1CVSS0.00251EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/05 5:54 a.m.•12 views

CVE-2026-28122

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro listingpro-plugin allows Reflected XSS.This issue affects ListingPro: from n/a through = 2.9.8...

5.9AI score0.00251EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/05 5:54 a.m.•41 views

CVE-2026-28122

CVE-2026-28122 is a Reflected Cross-Site Scripting vulnerability in the ListingPro WordPress plugin (ListingPro plugin) affecting versions up to 2.9.8. The issue arises from Improper Neutralization of Input During Web Page Generation, allowing an attacker to inject and execute script in a victim’...

7.1CVSS5.9AI score0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/05 5:54 a.m.•54 views

CVE-2026-28122 WordPress ListingPro plugin <= 2.9.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro listingpro-plugin allows Reflected XSS.This issue affects ListingPro: from n/a through = 2.9.8...

7.1CVSS0.00251EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/05 12:00 a.m.•1 views

CVE-2026-28122: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro listingpro-plugin allows Reflected XSS.This issue affects ListingPro: from n/a through = 2.9.8...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/05 12:00 a.m.•23 views

PT-2026-23394

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro listingpro-plugin allows Reflected XSS.This issue affects ListingPro: from n/a through = 2.9.8...

5.9AI score0.00251EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/18 12:00 a.m.•11 views

WordPress plugin ListingPro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

8.1CVSS6.5AI score0.00404EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 3:13 p.m.•11 views

CVE-2025-63046

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro listingpro-plugin allows DOM-Based XSS.This issue affects ListingPro: from n/a through = 2.9.9...

6.5CVSS6.4AI score0.00258EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/09 6:30 p.m.•17 views

EUVD-2025-201981

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro listingpro-plugin allows DOM-Based XSS.This issue affects ListingPro: from n/a through = 2.9.9...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/09 4:18 p.m.•11 views

CVE-2025-63046

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro listingpro-plugin allows DOM-Based XSS.This issue affects ListingPro: from n/a through = 2.9.9...

6.5CVSS0.00258EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/09 2:52 p.m.•5 views

CVE-2025-63046 WordPress ListingPro plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro listingpro-plugin allows DOM-Based XSS.This issue affects ListingPro: from n/a through = 2.9.9...

6.5CVSS6AI score0.00258EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•12 views

PT-2025-50048

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro listingpro-plugin allows DOM-Based XSS.This issue affects ListingPro: from n/a through = 2.9.9...

6.4AI score0.00258EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•0 views

CVE-2025-63046: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CridioStudio ListingPro listingpro-plugin allows DOM-Based XSS.This issue affects ListingPro: from n/a through = 2.9.9...

6.5CVSS5.8AI score0.00258EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•14 views

WordPress plugin ListingPro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

6.5CVSS6AI score0.00258EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2025/10/27 12:00 a.m.•50 views

VulnCheck KEV: CVE-2020-36723

The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the /listingpro-plugin/functions.php file. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, full names, email...

5.3CVSS5.8AI score0.01608EPSS
SaveIn wildExploits1References2
Patchstack
Patchstack
•added 2025/09/26 9:51 a.m.•13 views

WordPress ListingPro plugin <= 2.9.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin ListingPro versions = 2.9.8...

5.4CVSS5.2AI score0.00266EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder