Known vulnerabilities in the Listingpro plugin
15 security advisories have been published for the Listingpro plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Listingpro Plugin - Security Vulnerability (CVE-2026-42414) HIGH
- ListingPro - Broken Access Control (CVE-2026-65478) MEDIUM
- ListingPro - Cross-Site Scripting (XSS) (CVE-2026-56046) MEDIUM
- ListingPro - SQL Injection (CVE-2026-39438) CRITICAL
- Listingpro - Authentication Bypass (CVE-2024-39623) HIGH
- Listingpro - SQL Injection (CVE-2024-39622) CRITICAL
- Listingpro - SQL Injection (CVE-2024-38795) CRITICAL
- Listingpro - SQL Injection (CVE-2024-39620) HIGH
- Listingpro - Path Traversal (CVE-2024-39624) HIGH
- Listingpro - Path Traversal (CVE-2024-39621) HIGH
- Listingpro - Path Traversal (CVE-2024-39619) CRITICAL
- Listingpro - Broken Access Control (CVE-2020-36719) CRITICAL
- Listingpro - Security Vulnerability (CVE-2020-36723) MEDIUM
- Listingpro - Cross-Site Scripting (XSS) (CVE-2019-19540) MEDIUM
- Listingpro - Cross-Site Scripting (XSS) (CVE-2019-19542) MEDIUM
- Listingpro - Cross-Site Scripting (XSS) (CVE-2019-19541) MEDIUM