CridioStudio

Products

ProductCVEsExploitedLatest
ListingPro18–Oct 6, 2026
ListingPro Lead Form2–Dec 9, 2025
ListingPro Reviews2–Jan 22, 2026

Exploited and recent CVEs

  • CVE-2026-42414 High 8.5 WordPress ListingPro plugin <= 2.9.12 - SQL Injection vulnerability 0.3%
  • CVE-2026-65478 Medium 5.4 WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability 0.2%
  • CVE-2026-56046 Medium 6.5 WordPress ListingPro theme <= 2.9.11 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-28122 High 7.1 WordPress ListingPro plugin <= 2.9.8 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-69051 High 7.1 WordPress ListingPro Reviews theme <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-64378 High 7.1 WordPress ListingPro theme < 2.9.10 - Broken Access Control vulnerability 0.2%
  • CVE-2025-64377 High 8.1 WordPress ListingPro theme < 2.9.10 - Local File Inclusion vulnerability 0.4%
  • CVE-2025-64376 High 7.1 WordPress ListingPro theme < 2.9.10 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-63039 Medium 6.5 WordPress ListingPro theme <= 2.9.9 - Broken Access Control vulnerability 0.3%
  • CVE-2025-63049 Medium 5.3 WordPress ListingPro Lead Form plugin <= 1.0.7 - Broken Access Control vulnerability 0.3%
  • CVE-2025-63048 Medium 6.5 WordPress ListingPro Lead Form plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-63047 Medium 5.3 WordPress ListingPro theme <= 2.9.9 - Broken Access Control vulnerability 0.3%
  • CVE-2025-63046 Medium 6.5 WordPress ListingPro plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-60103 Medium 5.4 WordPress ListingPro plugin <= 2.9.8 - Broken Access Control vulnerability 0.3%
  • CVE-2025-58667 Medium 5.4 WordPress ListingPro Reviews plugin < 2.9.11 - Broken Access Control vulnerability 0.3%
  • CVE-2024-39623 High 8.8 WordPress ListingPro theme <= 2.9.4 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerability 0.3%
  • CVE-2024-39622 Critical 9.3 WordPress ListingPro theme <= 2.9.4 - Unauthenticated SQL Injection vulnerability 0.5%
  • CVE-2024-39620 High 8.5 WordPress ListingPro plugin <= 2.9.4 - SQL Injection vulnerability 0.4%
  • CVE-2024-38795 Critical 9.3 WordPress ListingPro plugin <= 2.9.4 - Unauthenticated SQL Injection vulnerability 0.5%
  • CVE-2024-39619 Critical 9.0 WordPress ListingPro plugin <= 2.9.4 - Unauthenticated Local File Inclusion vulnerability 0.6%
  • CVE-2024-39621 High 8.0 WordPress ListingPro plugin <= 2.9.4 - Local File Inclusion vulnerability 0.5%
  • CVE-2024-39624 High 8.5 WordPress ListingPro theme <= 2.9.4 - Local File Inclusion vulnerability 0.5%