PatchTheCVE: listingprohttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-39623: Cross-Site Request Forgery (CSRF) vulnerability in CridioStudio ListingPro listingpro allows Authentication Byhttps://patchthecve.com/cve/CVE-2024-39623.htmlhttps://patchthecve.com/cve/CVE-2024-39623.htmlWed, 17 Jun 2026 07:42:20 +0000HIGH 8.8: Cross-Site Request Forgery (CSRF) vulnerability in CridioStudio ListingPro listingpro allows Authentication Bypass.This issue affects ListingPro: from n/a through <= 2.9.4.CVE-2024-39622: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioSthttps://patchthecve.com/cve/CVE-2024-39622.htmlhttps://patchthecve.com/cve/CVE-2024-39622.htmlWed, 17 Jun 2026 07:42:20 +0000CRITICAL 9.3: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro allows SQL Injection.This issue affects ListingPro: from n/a through <= 2.9.4.CVE-2024-39620: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioSthttps://patchthecve.com/cve/CVE-2024-39620.htmlhttps://patchthecve.com/cve/CVE-2024-39620.htmlWed, 17 Jun 2026 07:42:20 +0000HIGH 8.5: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro-plugin allows SQL Injection.This issue affects ListingPro: from n/a through <= 2.9.4.CVE-2024-38795: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioSthttps://patchthecve.com/cve/CVE-2024-38795.htmlhttps://patchthecve.com/cve/CVE-2024-38795.htmlWed, 17 Jun 2026 07:41:04 +0000CRITICAL 9.3: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro-plugin allows SQL Injection.This issue affects ListingPro: from n/a through <= 2.9.4.CVE-2024-39624: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio Lhttps://patchthecve.com/cve/CVE-2024-39624.htmlhttps://patchthecve.com/cve/CVE-2024-39624.htmlWed, 17 Jun 2026 07:42:20 +0000HIGH 8.5: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through <= 2.9.4.CVE-2024-39621: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio Lhttps://patchthecve.com/cve/CVE-2024-39621.htmlhttps://patchthecve.com/cve/CVE-2024-39621.htmlWed, 17 Jun 2026 07:42:20 +0000HIGH 8.0: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through <= 2.9.4.CVE-2024-39619: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio Lhttps://patchthecve.com/cve/CVE-2024-39619.htmlhttps://patchthecve.com/cve/CVE-2024-39619.htmlWed, 17 Jun 2026 07:42:20 +0000CRITICAL 9.0: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through <= 2.9.4.