CVE Catalog
CVE-2026-65478
MediumCVSS 5.4Summary
The ListingPro plugin versions up to 2.9.10 contain a subscriber broken access control vulnerability. An attacker with subscriber privileges can bypass access control mechanisms.
Risk Assessment
A user with subscriber role may gain unauthorized access to functions or data, potentially leading to privilege escalation or information disclosure.
Recommendation
Immediately update the ListingPro plugin to the latest available version.
Other vulnerabilities in ListingPro
Original NVD description (English source)
Subscriber Broken Access Control in ListingPro <= 2.9.10 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS