CVE-2020-36723: Cridio Listingpro

Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days.

The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the ~/listingpro-plugin/functions.php file. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, full names, email addresses, phone numbers, physical addresses and user post counts.

Affected products

• Cridio Listingpro: before 2.6.1 (fixed in 2.6.1)

Published 2023-06-07. Last modified 2026-06-17.