High · 8.6 CVE-2021-36880 EUVD-2021-23456GHSA-hf5g-2885-9hqq

WordPress uListing plugin <= 2.0.3 - Unauthenticated SQL Injection (SQLi) vulnerability

Published Sep 27, 2021 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unauthenticated SQL Injection (SQLi) vulnerability in WordPress uListing plugin (versions <= 2.0.3), vulnerable parameter: custom.

Vendor	Product	Affected	Fixed
StylemixThemes	uListing (WordPress plugin)	<= 2.0.3 – ≤ 2.0.3	—