Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Directory Listings WordPress plugin – uListing — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in Directory Listings WordPress plugin – uListing, with AI-generated Chinese analysis, references, and POCs.

This page documents known security weaknesses associated with the uListing WordPress plugin developed by Vendor Directory Listings. It aggregates vulnerability data related to this specific product, covering various weakness types including injection flaws, cross-site scripting, and insufficient access controls. The database compiles reports from publicly disclosed incidents and vendor advisories spanning from the plugin’s initial release to the present date. This comprehensive collection aims to provide security researchers and administrators with a clear view of the historical and current threat landscape for uListing. Here, you can track a vendor's advisories by following official release notes and security bulletin updates. You can also understand a weakness class by examining detailed descriptions of how specific vulnerabilities exploit common coding errors within the WordPress ecosystem. Additionally, you can look up a product's vulnerability history to identify patterns in defect introduction and resolution over time. This information supports informed decision-making regarding patch management, risk assessment, and plugin replacement strategies. The aggregated content is sourced from official vendor channels, public vulnerability databases, and community disclosures. By consolidating these scattered reports, this page simplifies the process of evaluating the security posture of the uListing plugin. It serves as a reference for developers seeking to harden their implementations and for site owners aiming to maintain secure environments. The data is organized to facilitate easy navigation between product-specific details and broader vulnerability trends.

Vendor: Stylemix

CVE ID Title CVSS Severity Published
CVE-2025-1657 Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object Injection CWE-862 8.8 High 2025-03-15
CVE-2025-1653 Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Subscriber+) Privilege Escalation CWE-266 8.8 High 2025-03-15
CVE-2021-4381 uListing <= 1.6.6 - Unauthenticated Options Changes via wp_route CWE-862 9.8 Critical 2023-06-07
CVE-2021-4370 uListing <= 1.6.6 - Missing Authorization CWE-862 9.8 Critical 2023-06-07
CVE-2021-4357 uListing <= 1.6.6 - Unauthenticated Arbitrary Post/Page Deletion CWE-862 9.1 Critical 2023-06-07
CVE-2021-4345 uListing <= 1.6.6 - Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion CWE-862 6.5 Medium 2023-06-07
CVE-2021-4346 uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes CWE-862 9.8 Critical 2023-06-07
CVE-2021-4343 uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation CWE-862 9.8 Critical 2023-06-07
CVE-2021-4341 uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX CWE-862 9.8 Critical 2023-06-07
CVE-2021-4340 uListing <= 1.6.6 - Unauthenticated SQL Injection CWE-89 9.8 Critical 2023-06-07
CVE-2021-4339 uListing <= 1.6.6 - Unauthenticated Information Disclosure CWE-862 7.5 High 2023-06-07
CVE-2021-36875 WordPress uListing plugin <= 2.0.5 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability CWE-79 5.9 Medium 2021-09-27

All 12 known CVE vulnerabilities affecting Directory Listings WordPress plugin – uListing with full Chinese analysis, references, and POCs where available.