Login Request a demo
UL
Product
Ulisting
by Stylemixthemes · last CVE Mar 15, 2025
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 6High 6Medium 7Low 0
Severity
All severities19Critical6High6Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ulisting to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-1653
8.8
1%
Mar 15
Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Subscriber+) Privilege Escalation
Affected: through 2.1.7
CVE-2025-1657
8.8
0%
Mar 15
Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object Injection
Affected: through 2.1.7
CVE-2021-36876
8.8
0%
Sep 27
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in WordPress uListing plugin (versions <= 2.0.5) as it lacks CSRF checks on plugin administration pages
Affected: through 2.0.5
CVE-2021-36874
8.8
1%
Sep 27
Authenticated Insecure Direct Object References (IDOR) vulnerability in WordPress uListing plugin (versions <= 2.0.5)
Affected: through 2.0.5
CVE-2021-4346
7.5
1%
Jun 7
uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes
Affected: through 1.6.6
CVE-2021-4340
7.5
1%
Jun 7
uListing <= 1.6.6 - Unauthenticated SQL Injection
Affected: through 1.6.6
Showing 6