CVE-2025-1653

The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.7. This is due to the stmlistingprofileedit AJAX action not having enough restriction on the user meta that can be updated. This makes it possibl...

PT-2025-11314

Name of the Vulnerable Software and Affected Versions uListing plugin for WordPress versions up to, and including, 2.1.7 Description The uListing plugin for WordPress is vulnerable to Privilege Escalation due to the stm listing profile edit AJAX action not having enough restriction on the user me...

WordPress Plugin uListing security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...