All packages
ListingPro vulnerabilities
3 known CVE vulnerabilities in ListingPro, translated and rated.
- CVE-2026-42414High
The ListingPro plugin in versions up to and including 2.9.12 contains a Subscriber-level SQL Injection vulnerability. The flaw allows injection of malicious SQL queries into the database.
- CVE-2026-65478Medium
The ListingPro plugin versions up to 2.9.10 contain a subscriber broken access control vulnerability. An attacker with subscriber privileges can bypass access control mechanisms.
- CVE-2026-39438Critical
Unauthenticated SQL Injection exists in ListingPro versions <= 2.9.10.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS