Stylemixthemes Ulisting (Wordpress Plugin) vulnerabilities

6 vulnerabilities

Known vulnerabilities in Stylemixthemes Ulisting (Wordpress Plugin), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2021-36880stylemixthemesulisting+2
EPSS score
2.10%
Unauthenticated SQL Injection (SQLi) vulnerability in WordPress uListing plugin (versions <= 2.0.3), vulnerable parameter: custom.9.8CVE-2021-36879stylemixthemesulisting+2
EPSS score
2.18%
Unauthenticated Privilege Escalation vulnerability in WordPress uListing plugin (versions <= 2.0.5). Possible if WordPress configuration allows user registration.6.5CVE-2021-36877stylemixthemesulisting+2
EPSS score
0.44%
Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin (versions <= 2.0.5) makes it possible for attackers to modify user roles.8.8CVE-2021-36874stylemixthemesulisting+2
EPSS score
1.10%
Authenticated Insecure Direct Object References (IDOR) vulnerability in WordPress uListing plugin (versions <= 2.0.5).4.3CVE-2021-36878stylemixthemesulisting+2
EPSS score
0.44%
Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin (versions <= 2.0.5) makes it possible for attackers to update settings.8.8CVE-2021-36876stylemixthemesulisting+2
EPSS score
0.44%
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in WordPress uListing plugin (versions <= 2.0.5) as it lacks CSRF checks on plugin administration pages.