Ulisting
StylemixThemes · 19 CVEs
Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Subscriber+) Privilege Escalation
Mar 15, 2025
Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrar…
Mar 15, 2025
WordPress uListing plugin <= 2.1.5 - Sensitive Data Exposure vulnerability
Oct 7, 2024
uListing <= 1.6.6 - Unauthenticated Options Changes via wp_route
Jun 7, 2023
uListing <= 1.6.6 - Missing Authorization
Jun 7, 2023
uListing <= 1.6.6 - Unauthenticated Arbitrary Post/Page Deletion
Jun 7, 2023
uListing <= 1.6.6 - Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion
Jun 7, 2023
uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes
Jun 7, 2023
uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation
Jun 7, 2023
uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX
Jun 7, 2023
uListing <= 1.6.6 - Unauthenticated SQL Injection
Jun 7, 2023
uListing <= 1.6.6 - Unauthenticated Information Disclosure
Jun 7, 2023
WordPress uListing plugin <= 2.0.5 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability
Sep 27, 2021
WordPress uListing plugin <= 2.0.3 - Unauthenticated SQL Injection (SQLi) vulnerability
Sep 27, 2021
WordPress uListing plugin <= 2.0.5 - Authenticated Insecure Direct Object References (IDOR) vulnerability
Sep 27, 2021
WordPress uListing plugin <= 2.0.5 - Modify User Roles via Cross-Site Request Forgery (CSRF) vulnerability
Sep 27, 2021
WordPress uListing plugin <= 2.0.5 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
Sep 27, 2021
WordPress uListing plugin <= 2.0.5 - Unauthenticated Privilege Escalation vulnerability
Sep 27, 2021
WordPress uListing plugin <= 2.0.5 - Settings Update via Cross-Site Request Forgery (CSRF) vulnerability
Sep 27, 2021
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2025-1653 | Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Subscriber+) Privilege Escalation | HIGH | 0.52% | Mar 15, 2025 |
| CVE-2025-1657 | Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object Inject… | HIGH | 0.43% | Mar 15, 2025 |
| CVE-2024-47344 | WordPress uListing plugin <= 2.1.5 - Sensitive Data Exposure vulnerability | MEDIUM | 0.36% | Oct 7, 2024 |
| CVE-2021-4381 | uListing <= 1.6.6 - Unauthenticated Options Changes via wp_route | CRITICAL | 1.39% | Jun 7, 2023 |
| CVE-2021-4370 | uListing <= 1.6.6 - Missing Authorization | CRITICAL | 1.39% | Jun 7, 2023 |
| CVE-2021-4357 | uListing <= 1.6.6 - Unauthenticated Arbitrary Post/Page Deletion | CRITICAL | 1.01% | Jun 7, 2023 |
| CVE-2021-4345 | uListing <= 1.6.6 - Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion | MEDIUM | 0.73% | Jun 7, 2023 |
| CVE-2021-4346 | uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes | CRITICAL | 1.24% | Jun 7, 2023 |
| CVE-2021-4343 | uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation | CRITICAL | 1.39% | Jun 7, 2023 |
| CVE-2021-4341 | uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX | CRITICAL | 1.13% | Jun 7, 2023 |
| CVE-2021-4340 | uListing <= 1.6.6 - Unauthenticated SQL Injection | CRITICAL | 1.18% | Jun 7, 2023 |
| CVE-2021-4339 | uListing <= 1.6.6 - Unauthenticated Information Disclosure | HIGH | 0.95% | Jun 7, 2023 |
| CVE-2021-36875 | WordPress uListing plugin <= 2.0.5 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability | MEDIUM | 0.77% | Sep 27, 2021 |
| CVE-2021-36880 | WordPress uListing plugin <= 2.0.3 - Unauthenticated SQL Injection (SQLi) vulnerability | CRITICAL | 2.10% | Sep 27, 2021 |
| CVE-2021-36874 | WordPress uListing plugin <= 2.0.5 - Authenticated Insecure Direct Object References (IDOR) vulnerability | HIGH | 1.10% | Sep 27, 2021 |
| CVE-2021-36877 | WordPress uListing plugin <= 2.0.5 - Modify User Roles via Cross-Site Request Forgery (CSRF) vulnerability | MEDIUM | 0.44% | Sep 27, 2021 |
| CVE-2021-36876 | WordPress uListing plugin <= 2.0.5 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities | HIGH | 0.44% | Sep 27, 2021 |
| CVE-2021-36879 | WordPress uListing plugin <= 2.0.5 - Unauthenticated Privilege Escalation vulnerability | CRITICAL | 2.18% | Sep 27, 2021 |
| CVE-2021-36878 | WordPress uListing plugin <= 2.0.5 - Settings Update via Cross-Site Request Forgery (CSRF) vulnerability | MEDIUM | 0.44% | Sep 27, 2021 |
Showing 1 to 19 of 19 CVEs