plugin

Findall Listing Vulnerabilities

2 known security issues reported for the Findall Listing WordPress plugin. Most recent disclosed Nov 27, 2025.

1 critical

Running Findall Listing on your site? Check whether your installed version is affected.

Scan your site free

FindAll Listing [findall-listing] < 1.1

unknown

[en] The FindAll Listing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.5. This is due to the 'findall_listing_user_registration_additional_params' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attacker...

Affected:
up to 1.1
Fixed in:
1.1
Disclosed:
Nov 27, 2025

CVE-2025-13538 on NVD →

FindAll Listing <= 1.0.5 - Unauthenticated Privilege Escalation

critical

The FindAll Listing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.5. This is due to the 'findall_listing_user_registration_additional_params' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to...

CVSS:
9.8
Affected:
up to 1.0.5
Fixed in:
1.1
Disclosed:
Nov 26, 2025

CVE-2025-13538 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database