CVE-2025-64378

Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through < 2.9.10.

Score

CVSS 3.1 7.1 High

Status

Deferred - audit@patchstack.com

Published

2025-12-18

Last modified

2026-10-05

Weaknesses

CWE-862

Affected products

• Listingpro (Cridiostudio)

References

• https://patchstack.com/database/Wordpress/Theme/listingpro/vulnerability/wordpress-listingpro-theme-2-9-10-broken-acces…