CVE-2026-49063
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
Listdom versions up to 5.5.0 contain a vulnerability that allows unauthenticated privilege escalation.
Risk Assessment
An attacker could exploit this vulnerability to gain elevated privileges in the system, potentially leading to serious security breaches.
Recommendation
It is recommended to upgrade to the latest version of Listdom to mitigate this vulnerability.
Other vulnerabilities in Listdom
See all- CVE-2026-19796High
The Listdom plugin for WordPress up to version 5.8.1 is vulnerable to stored cross-site scripting via the 'lsd[displ][style]' parameter due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts on pages that will execute whenever a user accesses an injected page. Exploitation requires the Listdom Pro add-on to be active and the 'Display Options Per Listing' setting enabled.
- CVE-2026-61969Critical
Unauthenticated SQL Injection vulnerability in Listdom versions up to 5.6.0. An attacker can execute arbitrary SQL queries without authentication.
Original NVD description (English source)
Unauthenticated Privilege Escalation in Listdom <= 5.5.0 versions.