uListing
Stylemix
Developer
2.2.0
Latest version
1,000
Installations
No date
Last updated
Vulnerability history
4 present
15 fixed
12 Mitigation rules
- WordPress Directory Listings WordPress plugin - uListing plugin <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object Injection vulnerability<= 2.2.0Dec 31, 2025
- Deserialization of untrusted data vulnerability<= 2.2.0Apr 15, 2025
- SQL Injection vulnerability<= 2.2.0Apr 4, 2025
- Authenticated (Subscriber+) Privilege Escalation vulnerability<= 2.1.7Mar 26, 2025
- SQL Injection vulnerability<= 2.1.6Feb 3, 2025
- SQL Injection vulnerability<= 2.1.6Feb 3, 2025
- Sensitive Data Exposure vulnerability<= 2.1.5Sep 27, 2024
- Authenticated Insecure Direct Object References (IDOR) vulnerability<= 2.0.5Jul 27, 2021
- Authenticated Reflected Cross-Site Scripting (XSS) vulnerability<= 2.0.5Jul 27, 2021
- Multiple Cross-Site Request Forgery (CSRF) vulnerabilities<= 2.0.5Jul 27, 2021
- Modify User Roles via Cross-Site Request Forgery (CSRF) vulnerability<= 2.0.5Jul 27, 2021
- Settings Update via Cross-Site Request Forgery (CSRF) vulnerability<= 2.0.5Jul 27, 2021
- Unauthenticated Privilege Escalation vulnerability<= 2.0.5Jul 27, 2021
- Unauthenticated SQL Injection (SQLi) vulnerability<= 2.0.3Jul 26, 2021
- Unauthenticated Information Disclosure vulnerability<= 1.6.6Jan 28, 2021
- Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities<= 1.6.6Jan 28, 2021
- Unauthenticated Arbitrary Post/Page Deletion vulnerability<= 1.6.6Jan 28, 2021
- Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion vulnerability<= 1.6.6Jan 28, 2021
- Unauthenticated Arbitrary Account Creation/Change vulnerability<= 1.6.6Jan 28, 2021