Cridio

12 CVEs across 1 Cridio products. Browse Cridio vulnerabilities, severities, and proof-of-concept exploits.

Cridio products with known CVEs

ProductCVEs
Listingpro12
Cridio CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-39623High8.82025-01-02Cross-Site Request Forgery (CSRF) vulnerability in CridioStudio ListingPro listingpro allows Authentication Bypass.This issue affects ListingPro: from n/a thro…
CVE-2024-39622Critical9.32024-08-29Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro allows SQL Injection.T…
CVE-2024-39620High8.52024-08-29Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro-plugin allows SQL Inje…
CVE-2024-38795Critical9.32024-08-29Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro-plugin allows SQL Inje…
CVE-2024-39624High8.52024-08-01Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro allows PHP Local File Inclus…
CVE-2024-39621High8.02024-08-01Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File…
CVE-2024-39619Critical9.02024-08-01Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File…
CVE-2020-36723Medium5.32023-06-07The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the ~/listingpro-plugi…
CVE-2020-36719Critical9.82023-06-07The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Arbitrary Plugin Installation, Activation and Deactivation in versions befo…
CVE-2019-19542Medium5.42019-12-26The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Good For field on the new listing submit page.
CVE-2019-19541Medium5.42019-12-26The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Best Day/Night field on the new listing submit page.
CVE-2019-19540Medium6.12019-12-26The ListingPro theme before v2.0.14.2 for WordPress has Reflected XSS via the What field on the homepage.