CVE

CVE-2020-36723

5.3

CVSSmedium

Exploitable remotely over the internet · no authentication required.

Description

The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Sensitive Data Exposure in versions before 2.6.1 via the ~/listingpro-plugin/functions.php file. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, full names, email addresses, phone numbers, physical addresses and user post counts.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

listingpro - wordpress directory & listing theme

Updated Sep 25, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2020-36723 Scanner

CVE-2020-36723 Scanner - Sensitive Data Exposure vulnerability in ListingPro

Used 2.5k times · 3.3k assets checked · url

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →