Skip to content
OpenAdvisories

Product · stylemix

Directory Listings WordPress plugin – uListing

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2021-4345

    uListing <= 1.6.6 - Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion

    The uListing plugin for WordPress is vulnerable to authorization bypass due to missing capability and nonce checks on the UlistingUserRole::save_role_api method in versions up to, and including, 1.6.6. This makes it possible for unauthenticated attackers to r…

    stylemix Directory Listings WordPress plugin – uListing Web / CMS
  • Medium 5.9
    CVE-2021-36875

    WordPress uListing plugin <= 2.0.5 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability

    Cross-site Scripting (XSS) vulnerability in Stylemix Directory Listings WordPress plugin – uListing allows Reflected XSS.This issue affects Directory Listings WordPress plugin – uListing: from n/a through 2.0.5.

    stylemix Directory Listings WordPress plugin – uListing Web / CMS