CVE-2020-36723: ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Sensitive Information Disclosure
The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the ~/listingpro-plugin/functions.php file. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, full names, email addresses, phone numbers, physical addresses and user post counts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-36723?
CVE-2020-36723 is considered a high severity vulnerability due to the risk of sensitive data exposure.
How do I fix CVE-2020-36723?
To fix CVE-2020-36723, update the ListingPro theme for WordPress to version 2.6.1 or higher.
What types of sensitive data are exposed by CVE-2020-36723?
CVE-2020-36723 allows unauthenticated attackers to access sensitive data such as usernames, full names, and email addresses.
Which versions of ListingPro are affected by CVE-2020-36723?
CVE-2020-36723 affects all versions of ListingPro prior to 2.6.1.
Who is vulnerable to CVE-2020-36723?
Users of the ListingPro theme for WordPress who have not updated to version 2.6.1 or higher are vulnerable to CVE-2020-36723.