CVE-2026-28138

Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects uListing: from n/a through = 2.2.0...

CVE-2025-25150 Directory Listings WordPress uListing plugin <= 2.1.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Stylemix uListing allows Blind SQL Injection. This issue affects uListing: from n/a through 2.1.6...

CVE-2025-25151

CVE-2025-25151 describes an SQL Injection in WordPress plugin uListing (StylemixThemes) ≤ 2.1.6 due to improper neutralization of input for SQL commands. The CVSS v3.1 base metrics indicate a HIGH impact on confidentiality, LOW on availability, with NETWORK attack vector, LOW privileges required,...