VendorsStylemixThemesulistingany version
Vulnerabilities

StylemixThemes uListing any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

18CVEs
CVE-2021-36879
WordPress uListing plugin <= 2.0.5 - Unauthenticated Privilege Escalation vulnerability
Published 2021-09-27 · Modified
9.8EPSS 0.022
CVE-2021-36880
WordPress uListing plugin <= 2.0.3 - Unauthenticated SQL Injection (SQLi) vulnerability
Published 2021-09-27 · Modified
9.8EPSS 0.021
CVE-2021-4381
uListing <= 1.6.6 - Unauthenticated Options Changes via wp_route
Published 2023-06-07 · Modified
9.8EPSS 0.014
CVE-2021-4370
uListing <= 1.6.6 - Missing Authorization
Published 2023-06-07 · Modified
9.8EPSS 0.014
CVE-2021-4343
uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation
Published 2023-06-07 · Modified
9.8EPSS 0.014
CVE-2021-4346
uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes
Published 2023-06-07 · Modified
9.8EPSS 0.012
CVE-2021-4340
uListing <= 1.6.6 - Unauthenticated SQL Injection
Published 2023-06-07 · Modified
9.8EPSS 0.012
CVE-2021-4341
uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX
Published 2023-06-07 · Modified
9.8EPSS 0.011
CVE-2021-4357
uListing <= 1.6.6 - Unauthenticated Arbitrary Post/Page Deletion
Published 2023-06-07 · Modified
9.1EPSS 0.010
CVE-2021-36874
WordPress uListing plugin <= 2.0.5 - Authenticated Insecure Direct Object References (IDOR) vulnerability
Published 2021-09-27 · Modified
8.8EPSS 0.011
CVE-2025-1653
Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Subscriber+) Privilege Escalation
Published 2025-03-15 · Modified
8.8EPSS 0.005
CVE-2021-36876
WordPress uListing plugin <= 2.0.5 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
Published 2021-09-27 · Modified
8.8EPSS 0.004
CVE-2025-1657
Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object Injection
Published 2025-03-15 · Modified
8.8EPSS 0.004
CVE-2021-4339
uListing <= 1.6.6 - Unauthenticated Information Disclosure
Published 2023-06-07 · Modified
7.5EPSS 0.009
CVE-2021-4345
uListing <= 1.6.6 - Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion
Published 2023-06-07 · Modified
6.5EPSS 0.007
CVE-2021-36877
WordPress uListing plugin <= 2.0.5 - Modify User Roles via Cross-Site Request Forgery (CSRF) vulnerability
Published 2021-09-27 · Modified
6.5EPSS 0.004
CVE-2021-36875
WordPress uListing plugin <= 2.0.5 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability
Published 2021-09-27 · Modified
5.9EPSS 0.008
CVE-2021-36878
WordPress uListing plugin <= 2.0.5 - Settings Update via Cross-Site Request Forgery (CSRF) vulnerability
Published 2021-09-27 · Modified
4.3EPSS 0.004