CVE-2021-4339

CVE-2021-4339 — WordPress uListing plugin : Affected software is the uListing WordPress plugin (versions up to 1.6.6). Root cause is a missing capability check in ulisting/includes/route.php for the REST endpoint /1/api/ulisting-user/search, leading to an authorization bypass. Impact: unauthentic...