CVE-2025-25150

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Stylemix uListing ulisting allows Blind SQL Injection.This issue affects uListing: from n/a through = 2.1.6...

CVE-2025-25150

creationtimestamp| type| source ---|---|--- 2025-03-03 15:48:52+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099285625743491 2025-03-04 00:00:09+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljj5uet6o62d 2025-03-04 12:00:07+00:00| seen|...

CVE-2025-25150 WordPress uListing plugin <= 2.1.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Stylemix uListing ulisting allows Blind SQL Injection.This issue affects uListing: from n/a through = 2.1.6...

CVE-2025-25150

CVE-2025-25150 describes an SQL Injection vulnerability in the WordPress plugin uListing (Directory Listings) where improper neutralization of user input enables blind SQL injection. Affected versions are uListing up to 2.1.6 (inclusive). The CVSS is 3.1 v3 base score 9.3 (CRITICAL), indicating h...