Wp Listings Vulnerabilities

The IMPress Listings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check in versions up to, and including, 2.6.2. This makes it possible for unauthenticated attackers to perform unauthorized actions.

CVSS:

6.5

Affected:

up to 2.6.2

Fix:

No patched version reported

Disclosed:

Oct 11, 2023

CVE-2023-45633 on NVD →

The IMPress Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple listing fields in versions up to, and including, 2.6.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject ar...

CVSS:

5.4

Affected:

up to 2.6.2

Fix:

No patched version reported

Disclosed:

Apr 6, 2023

CVE-2023-22711 on NVD →

The IMPress Listings plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters in the 'includes/views/single-listing.php' file in versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inj...

CVSS:

6.1

Affected:

up to 2.0.1

Fixed in:

2.0.2

Disclosed:

Jan 27, 2016

CVE-2016-11013 on NVD →