All 6 CVE vulnerabilities found in uListing (WordPress plugin), with AI-generated Chinese analysis, references, and POCs.
Vendor: StylemixThemes
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2021-36880 | WordPress uListing plugin <= 2.0.3 - Unauthenticated SQL Injection (SQLi) vulnerability CWE-89 | 8.6 | High | 2021-09-27 |
| CVE-2021-36874 | WordPress uListing plugin <= 2.0.5 - Authenticated Insecure Direct Object References (IDOR) vulnerability | 7.1 | High | 2021-09-27 |
| CVE-2021-36877 | WordPress uListing plugin <= 2.0.5 - Modify User Roles via Cross-Site Request Forgery (CSRF) vulnerability CWE-352 | 4.3 | Medium | 2021-09-27 |
| CVE-2021-36876 | WordPress uListing plugin <= 2.0.5 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities CWE-352 | 5.4 | Medium | 2021-09-27 |
| CVE-2021-36879 | WordPress uListing plugin <= 2.0.5 - Unauthenticated Privilege Escalation vulnerability CWE-264 | 9.8 | Critical | 2021-09-27 |
| CVE-2021-36878 | WordPress uListing plugin <= 2.0.5 - Settings Update via Cross-Site Request Forgery (CSRF) vulnerability CWE-352 | 4.3 | Medium | 2021-09-27 |
All 6 known CVE vulnerabilities affecting uListing (WordPress plugin) with full Chinese analysis, references, and POCs where available.