9 matches found
EUVD-2021-23450
Malware in sbrugna...
WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Phat RiO - Fore-Z co.ltd in WordPress Plugin uListing versions = 2.2.0...
CVE-2025-25151 WordPress uListing Plugin <= 2.1.6 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Stylemix uListing ulisting allows SQL Injection.This issue affects uListing: from n/a through = 2.1.6...
CVE-2021-36880
Unauthenticated SQL Injection SQLi vulnerability in WordPress uListing plugin versions = 2.0.3, vulnerable parameter: custom...
CVE-2021-36874 WordPress uListing plugin <= 2.0.5 - Authenticated Insecure Direct Object References (IDOR) vulnerability
Authenticated Insecure Direct Object References IDOR vulnerability in WordPress uListing plugin versions = 2.0.5...
PT-2021-21388 · WordPress · Ulisting
Name of the Vulnerable Software and Affected Versions: WordPress uListing plugin versions = 2.0.5 Description: The issue is related to an Authenticated Reflected Cross-Site Scripting XSS vulnerability. Vulnerable parameters include filterid, filteruser, filterexpired date, filtercreated date, and...
WordPress uListing plugin <= 2.0.5 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
Authenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze Patchstack Red Team in WordPress uListing plugin versions = 2.0.5. Vulnerable parameters: &filterid, &filteruser, &filterexpireddate, &filtercreateddate, &filterupdateddate. Solution Update the WordPress uListing...
WordPress uListing plugin <= 2.0.5 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
Multiple Cross-Site Request Forgery CSRF vulnerabilities were discovered by m0ze Patchstack Red Team in WordPress uListing plugin versions = 2.0.5. Solution Update the WordPress uListing plugin to the latest available version at least 2.0.6...
WordPress uListing plugin <= 1.6.6 - Unauthenticated Information Disclosure vulnerability
Unauthenticated Information Disclosure vulnerability found by Jerome Bruandet in WordPress uListing plugin versions = 1.6.6. Solution Update the WordPress uListing plugin to the latest available version at least 1.7...