WordPress plugin
Listdom: AI-powered Business Directory with Classifieds Ads Listings security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 9 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High3
- Medium5
- Low0
All Listdom: AI-powered Business Directory with Classifieds Ads Listings vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.9 | Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'ix[file]' Parameter ≤6.1.2Update to 6.2.0 | CVE-2026-104722 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via 'lsd[remark]' Parameter ≤6.1.1Update to 6.1.2 | CVE-2026-96647 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting via 'lsd[displ][style]' Parameter ≤5.8.1Update to 5.9.0 | CVE-2026-19796 | |
| High7.5 | Unauthenticated SQL Injection ≤5.6.0Update to 5.7.0 | CVE-2026-61969 | |
| High7.5 | Unauthenticated SQL Injection ≤5.4.0Update to 5.5.0 | CVE-2026-54819 | |
| Critical9.8 | Unauthenticated Privilege Escalation ≤5.5.0Update to 5.6.0 | CVE-2026-49063 | |
| Medium4.3 | Missing Authorization ≤5.0.1Update to 5.1.0 | CVE-2025-67560 | |
| Medium6.1 | Open Redirect ≤4.0.0Update to 4.1.0 | CVE-2025-39599 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode Parameter ≤3.7.0Update to 3.7.1 | CVE-2024-11854 |
- Medium4.9Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'ix[file]' Parameter
≤6.1.2Update to 6.2.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'lsd[remark]' Parameter
≤6.1.1Update to 6.1.2
- High7.2Unauthenticated Stored Cross-Site Scripting via 'lsd[displ][style]' Parameter
≤5.8.1Update to 5.9.0
- High7.5Unauthenticated SQL Injection
≤5.6.0Update to 5.7.0
- High7.5Unauthenticated SQL Injection
≤5.4.0Update to 5.5.0
- Critical9.8Unauthenticated Privilege Escalation
≤5.5.0Update to 5.6.0
- Medium4.3Missing Authorization
≤5.0.1Update to 5.1.0
- Medium6.1Open Redirect
≤4.0.0Update to 4.1.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode Parameter
≤3.7.0Update to 3.7.1
Listdom: AI-powered Business Directory with Classifieds Ads Listings: common questions
Does Listdom: AI-powered Business Directory with Classifieds Ads Listings have known vulnerabilities?
Yes. VulnCrest Radar lists 9 known vulnerabilities in Listdom: AI-powered Business Directory with Classifieds Ads Listings: 1 critical, 3 high, 5 medium. None are known to affect version null.
How do I check which version of Listdom: AI-powered Business Directory with Classifieds Ads Listings I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Listdom: AI-powered Business Directory with Classifieds Ads Listings vulnerability?
CVE-2026-104722, published Oct 9, 2026: Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 6.1.2 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'ix[file]' Parameter. Severity: Medium (CVSS 4.9).
Is any Listdom: AI-powered Business Directory with Classifieds Ads Listings vulnerability listed in CISA KEV?
No. None of the known Listdom: AI-powered Business Directory with Classifieds Ads Listings vulnerabilities is currently listed in the CISA KEV catalog.