Lucene search

K

8 matches found

CVE
CVE
added 2019/12/26 3:15 p.m.66 views

CVE-2019-19540

The ListingPro theme before v2.0.14.2 for WordPress has Reflected XSS via the What field on the homepage.

6.1CVSS6AI score0.0019EPSS
CVE
CVE
added 2019/12/26 3:15 p.m.60 views

CVE-2019-19542

The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Good For field on the new listing submit page.

5.4CVSS5.3AI score0.00162EPSS
CVE
CVE
added 2019/12/26 3:15 p.m.57 views

CVE-2019-19541

The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Best Day/Night field on the new listing submit page.

5.4CVSS5.3AI score0.00162EPSS
Web
CVE
CVE
added 2024/08/01 9:15 p.m.49 views

CVE-2024-39619

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through 2.9.3.

9.8CVSS9.2AI score0.01599EPSS
CVE
CVE
added 2025/01/02 1:15 p.m.44 views

CVE-2024-39623

Cross-Site Request Forgery (CSRF) vulnerability in CridioStudio ListingPro allows Authentication Bypass.This issue affects ListingPro: from n/a through 2.9.4.

8.8CVSS8.8AI score0.00055EPSS
CVE
CVE
added 2024/08/01 9:15 p.m.44 views

CVE-2024-39624

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through 2.9.3.

8.8CVSS8.5AI score0.016EPSS
CVE
CVE
added 2024/08/01 9:15 p.m.39 views

CVE-2024-39621

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through 2.9.3.

8CVSS8.1AI score0.00827EPSS
CVE
CVE
added 2023/06/07 2:15 a.m.27 views

CVE-2020-36723

The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the ~/listingpro-plugin/functions.php file. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, full names, email ...

5.3CVSS5AI score0.002EPSS