Medium · 4.3 CVE-2021-36878 EUVD-2021-23454GHSA-23rw-h3j3-5576

WordPress uListing plugin <= 2.0.5 - Settings Update via Cross-Site Request Forgery (CSRF) vulnerability

Published Sep 27, 2021 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin (versions <= 2.0.5) makes it possible for attackers to update settings.

Vendor	Product	Affected	Fixed
StylemixThemes	uListing (WordPress plugin)	<= 2.0.5 – ≤ 2.0.5	—