CVE-2026-17092 Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Listing Deletion via 'listing_id' Parameter

The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.10.2.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it...

CVE-2026-17092

The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to an authorization bypass in all versions up to and including 8.10.2.1 . The root cause is a failure to properly verify user permissions when performing certain actions. Consequently, an ...

CVE-2021-4340

The uListing plugin for WordPress is vulnerable to generic SQL Injection via the ‘listingid’ parameter in versions up to, and including, 1.6.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

WordPress Plugin uListing has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2021-4340: Improper Neutralization of Special Elements used in an SQL Command

The uListing plugin for WordPress is vulnerable to generic SQL Injection via the ‘listingid’ parameter in versions up to, and including, 1.6.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

WP Realty - index_ext.php listing_id Parameter Reflected XSS

The wp-realty WordPress plugin was affected by an indexext.php listingid Parameter Reflected XSS security vulnerability...

CVE-2008-3185

SQL injection vulnerability in index.php in Relative Real Estate Systems 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the listingid parameter in a listings action...

Sql injection

SQL injection vulnerability in index.php in Relative Real Estate Systems 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the listingid parameter in a listings action...

CVE-2008-3185: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Relative Real Estate Systems 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the listingid parameter in a listings action...

CVE-2008-3123

SQL injection vulnerability in index.php in Mole Group Real Estate Script 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the listingid parameter in a listings action...

CVE-2008-3123: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Mole Group Real Estate Script 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the listingid parameter in a listings action...

Relative Real Estate Systems 3.0 - listing_id SQL Injection

Relative Real Estate Systems 3.0 - listingid SQL Injection \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV99$2008 ----------------------------------------------------------------------------------------- ECHOADV99$2008 Relative Real Estate Systems = 3.0...

Relative Real Estate Systems <= 3.0 (listing_id) SQL Injection Vuln

Exploit for unknown platform in category web applications =================================================================== Relative Real Estate Systems = 3.0 listingid SQL Injection Vuln =================================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \...