Advisories · Technology

StylemixThemes uListing (WordPress plugin).

Every CVE that names StylemixThemes uListing (WordPress plugin) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-36880 CVE record

CVSS 8.6 High

WordPress uListing plugin <= 2.0.3 - Unauthenticated SQL Injection (SQLi) vulnerability
- StylemixThemes uListing (WordPress plugin)
- SQL injection
Not analysed yet 27 Sept 2021
CVE-2021-36874 CVE record

CVSS 7.1 High

WordPress uListing plugin <= 2.0.5 - Authenticated Insecure Direct Object References (IDOR) vulnerability
- StylemixThemes uListing (WordPress plugin)
Not analysed yet 27 Sept 2021
CVE-2021-36877 CVE record

CVSS 4.3 Medium

WordPress uListing plugin <= 2.0.5 - Modify User Roles via Cross-Site Request Forgery (CSRF) vulnerability
- StylemixThemes uListing (WordPress plugin)
- Cross-site request forgery (CSRF)
Not analysed yet 27 Sept 2021
CVE-2021-36876 CVE record

CVSS 5.4 Medium

WordPress uListing plugin <= 2.0.5 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
- StylemixThemes uListing (WordPress plugin)
- Cross-site request forgery (CSRF)
Not analysed yet 27 Sept 2021
CVE-2021-36879 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress uListing plugin <= 2.0.5 - Unauthenticated Privilege Escalation vulnerability
- StylemixThemes uListing (WordPress plugin)
- CWE-264
Not analysed yet 27 Sept 2021
CVE-2021-36878 CVE record

CVSS 4.3 Medium

WordPress uListing plugin <= 2.0.5 - Settings Update via Cross-Site Request Forgery (CSRF) vulnerability
- StylemixThemes uListing (WordPress plugin)
- Cross-site request forgery (CSRF)
Not analysed yet 27 Sept 2021