CVE-2024-39619: WordPress ListingPro plugin <= 2.9.4 - Unauthenticated Local File Inclusion vulnerability
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through <= 2.9.4.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39619?
CVE-2024-39619 is classified as a high severity vulnerability due to its potential for local file inclusion attacks.
How do I fix CVE-2024-39619?
To fix CVE-2024-39619, update ListingPro to the latest version beyond 2.9.3, where the vulnerability is patched.
Who is affected by CVE-2024-39619?
CVE-2024-39619 affects users of CridioStudio ListingPro and WordPress ListingPro up to version 2.9.3.
What type of vulnerability is CVE-2024-39619?
CVE-2024-39619 is a Path Traversal vulnerability that allows for improper limitation of a pathname to a restricted directory.
Can CVE-2024-39619 lead to remote exploits?
Yes, CVE-2024-39619 can potentially allow an attacker to perform local file inclusion which may lead to remote exploits.