Listeo - Directory & Listings With Booking - WordPress Theme

Listeo - Directory & Listings With Booking - WordPress Theme has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.5 out of 10. 2021 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Authorization Bypass Through User-Controlled Key.

Every one of the 3 issues recorded for Listeo - Directory & Listings With Booking - WordPress Theme has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (2) reported by R3N0.

01234567891010.02.2021Today10.02.20216.1Listeo - Directory & Listings With Booking - WordPress Theme < 1.6.11 - Cross-Site Scripting CVSS 6.1 · 10.02.202116.05.20216.5Listeo - Directory & Listings With Booking - WordPress Theme < 1.6.11 - Insecure Direct Object Reference CVSS 6.5 · 16.05.202124.10.20256.4Listeo <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via soundcloud Shortcode CVSS 6.4 · 24.10.2025

Strategic Overview

Avg CVSSMedium
6.3/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all Listeo - Directory & Listings With Booking - WordPress Theme vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2021-24318

Listeo - Directory & Listings With Booking - WordPress Theme < 1.6.11 - Insecure Direct Object Reference

Read the full analysis

Vulnerability Records

3 records
Showing 1–3 of 3 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C