Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-25150 EUVD-2025-5643GHSA-6hmw-2vcp-mxf9

WordPress uListing plugin <= 2.1.6 - SQL Injection vulnerability

Published Mar 3, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix uListing ulisting allows Blind SQL Injection.This issue affects uListing: from n/a through <= 2.1.6.

Affected products

VendorProductAffectedFixed
Stylemix uListing ≤ 2.1.6 —

References