CVE-2026-39438

CriticalCVSS 9.3

Published: 17/06/2026(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

29th percentile — higher than 29% of all known CVEs

Unauthenticated SQL Injection exists in ListingPro versions <= 2.9.10.

An attacker could exploit this vulnerability to gain access to database data, potentially leading to serious security breaches.

It is recommended to upgrade to the latest version of ListingPro to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated SQL Injection in ListingPro <= 2.9.10 versions.