9.8
Critical
CVE-2021-36879 Unauthenticated Privilege Escalation vulnerability in WordPress uListing plugin (versions <= 2.0.5)
Description
Unauthenticated Privilege Escalation vulnerability in WordPress uListing plugin (versions <= 2.0.5). Possible if WordPress configuration allows user registration.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| uListing (WordPress plugin) 2.0 | earliest → 2.0.5 | No fix stated |
Other CVEs of uListing (WordPress plugin)
The 6 CVEs of uListing (WordPress plugin) →
CVE-2021-36880
Unauthenticated SQL Injection (SQLi) vulnerability in WordPress uListing plugin…
8.6
High
CVE-2021-36874
Authenticated Insecure Direct Object References (IDOR) vulnerability in WordPress uListing plugin (versions <= 2.0.5)
7.1
High
CVE-2021-36877
Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin…
4.3
Medium
CVE-2021-36876
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in WordPress uListing plugin…
5.4
Medium