Conoce las vulnerabilidades. Protege tus aplicaciones.

Media 09.10.2026

CVE-2026-104722

Listdom <= 6.1.2 - Salto de directorio autenticado para eliminación arbitraria de archivos mediante el parámetro 'ix[file]'

El complemento Listdom para WordPress hasta la versión 6.1.2 permite a atacantes autenticados como administradores eliminar archivos arbitrarios en el servidor mediante salto de directorio, lo que puede facilitar la ejecución remota de código.

WordPress

listdom

Media 01.10.2026

CVE-2026-96647

Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 6.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lsd[remark]' Parameter

WordPress

listdom

Alta 31.08.2026

CVE-2026-19796

Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 5.8.1 - Unauthenticated Stored Cross-Site Scripting via 'lsd[displ][style]' Parameter

WordPress

listdom

Alta 11.08.2026

CVE-2026-61969

Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 5.6.0 - Unauthenticated SQL Injection

WordPress

listdom

Alta 17.06.2026

CVE-2026-54819

Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 5.4.0 - Unauthenticated SQL Injection

WordPress

listdom

Crítica 08.06.2026

CVE-2026-49063

Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 5.5.0 - Unauthenticated Privilege Escalation

WordPress

listdom

Media 15.12.2025

CVE-2025-67560

Listdom <= 5.0.1 - Missing Authorization

WordPress

listdom

Media 16.04.2025

CVE-2025-39599

Listdom <= 4.0.0 - Open Redirect

WordPress

listdom

Media 03.12.2024

CVE-2024-11854

Listdom – Business Directory and Classified Ads Listings WordPress Plugin <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode Parameter

WordPress

listdom