Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-06503
HistorySep 28, 2021 - 12:00 a.m.

WordPress plugin uListing cross-site request forgery vulnerability

2021-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
wordpress
ulisting
cross-site request forgery
vulnerability
role modification
vue.js

EPSS

0.001

Percentile

21.6%

The WordPress plugin uListing is a directory and listing plugin based on Vue.js. The WordPress plugin uListing 2.0.5 and earlier versions are vulnerable to cross-site request forgery. An attacker could exploit the vulnerability to modify user roles.

EPSS

0.001

Percentile

21.6%