CRITICAL
WordPress ListingPro plugin <= 2.9.4 - Unauthenticated Local File Inclusion vulnerability
Published Aug 1, 2024
9.8
CRITICALCVSS 3.1
EPSS 0.55%
Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through <= 2.9.4.
Affected products
-
Affected
- ≥ 0, ≤ 2.9.4
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| CridioStudio | ListingPro | unaffected | Affected
|
- < 2.9.5
-
Affected
- ≥ 0, ≤ 2.9.3
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Cridio | Listingpro | unknown | Affected
|
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (2)
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Patchstack
Published Aug 1, 2024
Updated May 11, 2026
Reserved Jun 26, 2024
Link CVE-2024-39619
CISA Vulnrichment
Updated Aug 2, 2024
Red Hat
No data
GitHub
No data