WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
listamester
Published
2025-05-07
Title
Listamester < 2.3.7 - Cross-Site Request Forgery
Slug
listapp-mobile-manager
Published
2024-12-11
Title
ListApp Mobile Manager <= 1.7.7 - Missing Authorization to Privilege Escalation
Slug
listar-directory-listing
Published
2025-12-05
Title
Listar – Directory Listing & Classifieds WordPress Plugin <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
Slug
listar-directory-listing
Published
2025-12-05
Title
Listar – Directory Listing & Classifieds WordPress Plugin <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) Listing Update
Slug
listdom
Published
2024-12-03
Title
Listdom – Business Directory and Classified Ads Listings WordPress Plugin < 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode Parameter
Slug
listdom
Published
2025-04-16
Title
Listdom < 4.1.0 - Open Redirect
Slug
listdom
Published
2025-12-15
Title
Listdom < 5.1.0 - Missing Authorization
Slug
listeo-core
Published
2025-08-20
Title
Listeo-Core < 2.0.7 - Authenticated (Subscriber+) SQL Injection
Slug
listeo-core
Published
2026-01-06
Title
Listeo Core < 2.0.19 - Reflected Cross-Site Scripting
Slug
listeo-core
Published
2026-03-17
Title
Listeo-Core - Directory Plugin by Purethemes <= 2.0.21 - Reflected Cross-Site Scripting
Slug
listeo-core
Published
2026-04-03
Title
Listeo-Core - Directory Plugin by Purethemes < 2.0.28 - Unauthenticated Arbitrary Media Upload
Slug
listinghub
Published
2026-01-07
Title
ListingHub 1.2.6 - Unauthenticated Stored Cross-Site Scripting
Slug
listinghub
Published
2026-01-22
Title
ListingHub <= 1.2.7 - Missing Authorization
Slug
listingpro-lead-form
Published
2025-10-19
Title
ListingPro Lead Form <= 1.0.2 - Missing Authorization
Slug
listingpro-lead-form
Published
2025-10-19
Title
ListingPro Lead Form <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
listingpro-plugin
Published
2024-07-22
Title
ListingPro Plugin <= 2.9.3 - Unauthenticated Local File Inclusion
Slug
listingpro-plugin
Published
2024-07-22
Title
ListingPro Plugin <= 2.9.3 - Unauthenticated SQL Injection
Slug
listingpro-plugin
Published
2024-07-22
Title
ListingPro Plugin <= 2.9.3 - Authenticated (Subscriber+) SQL Injection
Slug
listingpro-plugin
Published
2024-07-22
Title
ListingPro Plugin <= 2.9.3 - Authenticated (Author+) Local File Inclusion
Slug
listingpro-plugin
Published
2025-09-26
Title
ListingPro <= 2.9.8 - Missing Authorization
Slug
listingpro-plugin
Published
2025-10-19
Title
ListingPro <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
listingpro-plugin
Published
2026-02-26
Title
ListingPro Plugin <= 2.9.8 - Reflected Cross-Site Scripting
Slug
listingpro-reviews
Published
2025-09-22
Title
ListingPro Reviews < 2.9.11 - Missing Authorization
Slug
listingpro-reviews
Published
2025-12-31
Title
ListingPro Reviews < 2.9.11 - Reflected Cross-Site Scripting
Slug
listings-for-appfolio
Published
2025-02-03
Title
Listings for Appfolio < 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting