Vulnerabilities (CVE)

Filtered by vendor Stylemixthemes Subscribe
Filtered by product Ulisting
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-36878 1 Stylemixthemes 1 Ulisting 2021-10-04 4.3 MEDIUM 4.3 MEDIUM
Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin (versions <= 2.0.5) makes it possible for attackers to update settings.
CVE-2021-36877 1 Stylemixthemes 1 Ulisting 2021-10-01 4.3 MEDIUM 6.5 MEDIUM
Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin (versions <= 2.0.5) makes it possible for attackers to modify user roles.
CVE-2021-36875 1 Stylemixthemes 1 Ulisting 2021-10-01 3.5 LOW 4.8 MEDIUM
Authenticated Reflected Cross-Site Scripting (XSS) vulnerability in WordPress uListing plugin (versions <= 2.0.5). Vulnerable parameters: &filter[id], &filter[user], &filter[expired_date], &filter[created_date], &filter[updated_date].