Skip to contentCridiostudio Listingpro vulnerabilities
- cridiostudio listingproWordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerabilityCVE-2026-424148.5 High
- cridiostudio listingproWordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerabilityCVE-2026-654785.4 Medium
- cridiostudio listingproWordPress ListingPro theme <= 2.9.11 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-560466.5 Medium
- cridiostudio listingproWordPress ListingPro plugin <= 2.9.10 - SQL Injection vulnerabilityCVE-2026-394389.3 Critical
- cridiostudio listingproWordPress ListingPro plugin <= 2.9.8 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2026-281227.1 High
- cridiostudio listingpro reviewsWordPress ListingPro Reviews theme <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-690517.1 High
- cridiostudio listingproWordPress ListingPro theme < 2.9.10 - Broken Access Control vulnerabilityCVE-2025-643787.1 High
- cridiostudio listingproWordPress ListingPro theme < 2.9.10 - Local File Inclusion vulnerabilityCVE-2025-643778.1 High
- cridiostudio listingproWordPress ListingPro theme < 2.9.10 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-643767.1 High
- cridiostudio listingproWordPress ListingPro theme <= 2.9.9 - Broken Access Control vulnerabilityCVE-2025-630396.5 Medium
- cridiostudio listingpro lead formWordPress ListingPro Lead Form plugin <= 1.0.7 - Broken Access Control vulnerabilityCVE-2025-630495.3 Medium
- cridiostudio listingpro lead formWordPress ListingPro Lead Form plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-630486.5 Medium
- cridiostudio listingproWordPress ListingPro theme <= 2.9.9 - Broken Access Control vulnerabilityCVE-2025-630475.3 Medium
- cridiostudio listingproWordPress ListingPro plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-630466.5 Medium
- cridiostudio listingproWordPress ListingPro plugin <= 2.9.8 - Broken Access Control vulnerabilityCVE-2025-601035.4 Medium
- cridiostudio listingpro reviewsWordPress ListingPro Reviews plugin < 2.9.11 - Broken Access Control vulnerabilityCVE-2025-586675.4 Medium
- cridio listingproWordPress ListingPro theme <= 2.9.4 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerabilityCVE-2024-396238.8 High
- cridio listingproWordPress ListingPro theme <= 2.9.4 - Unauthenticated SQL Injection vulnerabilityCVE-2024-396229.3 Critical
- cridio listingproWordPress ListingPro plugin <= 2.9.4 - SQL Injection vulnerabilityCVE-2024-396208.5 High
- cridio listingproWordPress ListingPro plugin <= 2.9.4 - Unauthenticated SQL Injection vulnerabilityCVE-2024-387959.3 Critical
- cridio listingproWordPress ListingPro plugin <= 2.9.4 - Unauthenticated Local File Inclusion vulnerabilityCVE-2024-396199.0 Critical
- cridio listingproWordPress ListingPro plugin <= 2.9.4 - Local File Inclusion vulnerabilityCVE-2024-396218.0 High
- cridio listingproWordPress ListingPro theme <= 2.9.4 - Local File Inclusion vulnerabilityCVE-2024-396248.5 High