VYPR
← All advisories
High severity8.0NVD Advisory· Published Aug 1, 2024· Updated Apr 23, 2026

CVE-2024-39621

CVE-2024-39621

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through <= 2.9.4.

Affected products

2
  • Cridio/Listingpro2 versions
    cpe:2.3:a:cridio:listingpro:*:*:*:*:*:wordpress:*:*+ 1 more
    • cpe:2.3:a:cridio:listingpro:*:*:*:*:*:wordpress:*:*range: <2.9.5
    • (no CPE)range: <= 2.9.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.