Listdom CVE-2025-67560
MEDIUMSeverity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Low-privileged user required, no user interaction, network attack vector, integrity and availability impact limited.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
1DescriptionCVE.org
Missing Authorization vulnerability in Webilia Inc. Listdom listdom allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Listdom: from n/a through <= 5.0.1.
AnalysisAI
Broken access control in the Listdom WordPress plugin up to version 5.0.1 allows authenticated low-privileged attackers to modify data and potentially disrupt service, as missing authorization checks can be exploited without user interaction. No active exploitation or public exploit has been reported at the time of analysis, and EPSS indicates a very low probability (0.05%) of exploitation.
Technical ContextAI
The vulnerability exists in the Listdom plugin for WordPress, a business directory tool. It is classified as CWE-862 (Missing Authorization), meaning the software does not perform adequate access control checks on sensitive endpoints. An attacker with a low-privileged account (such as a subscriber) can access and modify data that should be restricted to higher roles. The affected component is the access control enforcement mechanism within the plugin's PHP code, which fails to verify user capabilities before processing requests.
Affected ProductsAI
Listdom plugin for WordPress versions n/a through 5.0.1, as per the Patchstack advisory. The vendor's advisory can be found at https://patchstack.com/database/Wordpress/Plugin/listdom/vulnerability/wordpress-listdom-plugin-5-0-1-broken-access-control-vulnerability?_s_id=cve.
RemediationAI
Update the Listdom plugin to a version higher than 5.0.1, as the vendor has resolved the missing authorization issue in subsequent releases. If immediate update is not possible, a short-term workaround is to disable the plugin's front-end editing features or restrict user roles that can interact with the plugin's administrative functions, though this may impact legitimate directory management workflows. Reference the vendor advisory for the exact patched version.
More in Wordpress Plugin
View allThe Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1
The Hash Form - Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing fil
Authentication bypass in the LiteSpeed Cache WordPress plugin (versions prior to 6.5.0.1) allows unauthenticated remote
The Simple File List plugin for WordPress through version 4.2.2 contains an unauthenticated remote code execution vulner
The SureTriggers WordPress plugin through version 1.0.82 contains a privilege escalation vulnerability that allows unaut
The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via
The Business Directory Plugin - Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based
SQL injection in the NotificationX WordPress plugin (versions up to and including 2.8.2) allows unauthenticated remote a
The POST SMTP Mailer - Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress i
The MasterStudy LMS WordPress Plugin - for Online Courses and Education plugin for WordPress is vulnerable to union base
The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to SQL Injection via the ‘hash’ parameter in
Remote code execution in the WP Query Console WordPress plugin (versions up to and including 1.0) by Ajit Bohra allows u
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today