CVE-2024-39623

High CVSS: 8.8

Cross-Site Request Forgery (CSRF) vulnerability in CridioStudio ListingPro listingpro allows Authentication Bypass.This issue affects ListingPro: from n/a through <= 2.9.4.

Vendor

Cridio

Product

Listingpro

CWE

CWE-352

Yayın Tarihi

2025-01-02 13:15:07

Güncelleme

2026-04-01 16:17:38

Source Identifier

audit@patchstack.com

KEV Date Added

Kategoriler

CWE-352 Listingpro HIGH Cridio 2025

Referanslar

https://patchstack.com/database/Wordpress/Theme/listingpro/vulnerability/wordpress-listingpro-theme-2-9-3-cross-site-request-forgery-csrf-to-account-takeover-vulnerability?_s_id=cve