Threat database

22 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.5	EPSS 0.3%	CVE-2026-42414ListingPro · SQL Injection High8.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-42414 Subscriber SQL Injection in ListingPro <= 2.9.12 versions. EPSS 0.3%Vulnerability CridioStudio #cwe-89	CVE Database V5	2026-10-06
Medium	5.4	EPSS 0.2%	CVE-2026-65478ListingPro · Missing Authorization Medium5.4EPSS 0.2%2026-07-23CVE Database V5CVE-2026-65478 Subscriber Broken Access Control in ListingPro <= 2.9.10 versions. EPSS 0.2%Vulnerability CridioStudio #cwe-862	CVE Database V5	2026-07-23
Medium	6.5	EPSS 0.2%	CVE-2026-56046ListingPro · Cross-site Scripting Medium6.5EPSS 0.2%2026-06-26CVE Database V5CVE-2026-56046 Subscriber Cross Site Scripting (XSS) in ListingPro <= 2.9.11 versions. EPSS 0.2%Vulnerability CridioStudio #cwe-79	CVE Database V5	2026-06-26
High	7.1	EPSS 0.3%	CVE-2026-28122ListingPro · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in CridioStudio… High7.1EPSS 0.3%2026-03-05CVE Database V5CVE-2026-28122 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro listingpro-plugin allows Reflected XSS.This issue affects ListingPro: from n/a through <= 2.9.8. EPSS 0.3%Vulnerability CridioStudio	CVE Database V5	2026-03-05
High	7.1	EPSS 0.3%	CVE-2025-69051ListingPro Reviews · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in CridioStudio… High7.1EPSS 0.3%2026-01-22CVE Database V5CVE-2025-69051 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro Reviews listingpro-reviews allows Reflected XSS.This issue affects ListingPro Reviews: from n/a through < 2.9.11. EPSS 0.3%Vulnerability CridioStudio	CVE Database V5	2026-01-22
High	7.1	EPSS 0.2%	CVE-2025-64378ListingPro · Missing Authorization High7.1EPSS 0.2%2025-12-18CVE Database V5CVE-2025-64378 Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through < 2.9.10. EPSS 0.2%Vulnerability CridioStudio #cwe-862	CVE Database V5	2025-12-18
High	8.1	EPSS 0.4%	CVE-2025-64377ListingPro · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.4%2025-12-18CVE Database V5CVE-2025-64377 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CridioStudio ListingPro listingpro allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through < 2.9.10. EPSS 0.4%Vulnerability CridioStudio	CVE Database V5	2025-12-18
High	7.1	EPSS 0.2%	CVE-2025-64376ListingPro · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in CridioStudio… High7.1EPSS 0.2%2025-12-18CVE Database V5CVE-2025-64376 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro listingpro allows Reflected XSS.This issue affects ListingPro: from n/a through < 2.9.10. EPSS 0.2%Vulnerability CridioStudio	CVE Database V5	2025-12-18
Medium	6.5	EPSS 0.3%	CVE-2025-63039ListingPro · Missing Authorization Medium6.5EPSS 0.3%2025-12-18CVE Database V5CVE-2025-63039 Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through <= 2.9.9. EPSS 0.3%Vulnerability CridioStudio	CVE Database V5	2025-12-18
Medium	5.3	EPSS 0.3%	CVE-2025-63049ListingPro Lead Form · Missing Authorization Medium5.3EPSS 0.3%2025-12-09CVE Database V5CVE-2025-63049 Missing Authorization vulnerability in CridioStudio ListingPro Lead Form listingpro-lead-form allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ListingPro Lead Form: from n/a through <= 1.0.7. EPSS 0.3%Vulnerability CridioStudio #cwe-862	CVE Database V5	2025-12-09
Medium	6.5	EPSS 0.2%	CVE-2025-63048ListingPro Lead Form · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in CridioStudio… Medium6.5EPSS 0.2%2025-12-09CVE Database V5CVE-2025-63048 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro Lead Form listingpro-lead-form allows DOM-Based XSS.This issue affects ListingPro Lead Form: from n/a through <= 1.0.7. EPSS 0.2%Vulnerability CridioStudio #cwe-79	CVE Database V5	2025-12-09
Medium	5.3	EPSS 0.3%	CVE-2025-63047ListingPro · Missing Authorization Medium5.3EPSS 0.3%2025-12-09CVE Database V5CVE-2025-63047 Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through <= 2.9.9. EPSS 0.3%Vulnerability CridioStudio #cwe-862	CVE Database V5	2025-12-09
Medium	6.5	EPSS 0.3%	CVE-2025-63046ListingPro · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in CridioStudio… Medium6.5EPSS 0.3%2025-12-09CVE Database V5CVE-2025-63046 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro listingpro-plugin allows DOM-Based XSS.This issue affects ListingPro: from n/a through <= 2.9.9. EPSS 0.3%Vulnerability CridioStudio #cwe-79	CVE Database V5	2025-12-09
Medium	5.4	EPSS 0.3%	CVE-2025-60103ListingPro · Missing Authorization Medium5.4EPSS 0.3%2025-09-26CVE Database V5CVE-2025-60103 Missing Authorization vulnerability in CridioStudio ListingPro listingpro-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through <= 2.9.8. EPSS 0.3%Vulnerability CridioStudio #cwe-862	CVE Database V5	2025-09-26
Medium	5.4	EPSS 0.3%	CVE-2025-58667ListingPro Reviews · Missing Authorization Medium5.4EPSS 0.3%2025-09-22CVE Database V5CVE-2025-58667 Missing Authorization vulnerability in CridioStudio ListingPro Reviews listingpro-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro Reviews: from n/a through < 2.9.11. EPSS 0.3%Vulnerability CridioStudio	CVE Database V5	2025-09-22
High	8.8	EPSS 0.3%	CVE-2024-39623ListingPro · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2025-01-02CVE Database V5CVE-2024-39623 Cross-Site Request Forgery (CSRF) vulnerability in CridioStudio ListingPro listingpro allows Authentication Bypass.This issue affects ListingPro: from n/a through <= 2.9.4. EPSS 0.3%Vulnerability CridioStudio	CVE Database V5	2025-01-02
Critical	9.3	EPSS 0.5%	CVE-2024-39622ListingPro · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in CridioStudio… Critical9.3EPSS 0.5%2024-08-29CVE Database V5CVE-2024-39622 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro allows SQL Injection.This issue affects ListingPro: from n/a through <= 2.9.4. EPSS 0.5%Vulnerability CridioStudio	CVE Database V5	2024-08-29
High	8.5	EPSS 0.4%	CVE-2024-39620ListingPro · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in CridioStudio… High8.5EPSS 0.4%2024-08-29CVE Database V5CVE-2024-39620 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro-plugin allows SQL Injection.This issue affects ListingPro: from n/a through <= 2.9.4. EPSS 0.4%Vulnerability CridioStudio	CVE Database V5	2024-08-29
Critical	9.3	EPSS 0.5%	CVE-2024-38795ListingPro · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in CridioStudio… Critical9.3EPSS 0.5%2024-08-29CVE Database V5CVE-2024-38795 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro-plugin allows SQL Injection.This issue affects ListingPro: from n/a through <= 2.9.4. EPSS 0.5%Vulnerability CridioStudio	CVE Database V5	2024-08-29
Critical	9.0	EPSS 0.6%	CVE-2024-39619ListingPro · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in CridioStudio… Critical9.0EPSS 0.6%2024-08-01CVE Database V5CVE-2024-39619 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through <= 2.9.4. EPSS 0.6%Vulnerability CridioStudio	CVE Database V5	2024-08-01

Showing 1–20 of 22 results