CridioStudio ListingPro Lead Form vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting CridioStudio ListingPro Lead Form: 2 record(s), with affected versions and fixes.
CVE-2025-63049
Medium · 5.3
CWE-862 Dec 9, 2025
WordPress ListingPro Lead Form plugin <= 1.0.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in CridioStudio ListingPro Lead Form listingpro-lead-form allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ListingPro Lead Form: from n/a through <= 1.0.7.
CVE-2025-63048
Medium · 6.5
CWE-79 Dec 9, 2025
WordPress ListingPro Lead Form plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro Lead Form listingpro-lead-form allows DOM-Based XSS.This issue affects ListingPro Lead Form: from n/a through <= 1.0.7.