CVE-2024-38795: WordPress ListingPro plugin <= 2.9.4 - Unauthenticated SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro listingpro-plugin allows SQL Injection.This issue affects ListingPro: from n/a through <= 2.9.4.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38795?
CVE-2024-38795 is classified as a high severity vulnerability due to its potential for unauthorized database access through SQL injection.
How do I fix CVE-2024-38795?
To fix CVE-2024-38795, update the CridioStudio ListingPro plugin to version 2.9.5 or later.
What versions are affected by CVE-2024-38795?
CVE-2024-38795 affects all versions of CridioStudio ListingPro up to and including version 2.9.4.
What type of vulnerability is CVE-2024-38795?
CVE-2024-38795 is an SQL Injection vulnerability that allows attackers to manipulate SQL queries executed by the application.
Can CVE-2024-38795 be exploited without authentication?
Yes, CVE-2024-38795 can be exploited without authentication, making it particularly dangerous for publicly accessible applications.