8.6
High
CVE-2021-36880 Unauthenticated SQL Injection (SQLi) vulnerability in WordPress uListing plugin…
Description
Unauthenticated SQL Injection (SQLi) vulnerability in WordPress uListing plugin (versions <= 2.0.3), vulnerable parameter: custom.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| uListing (WordPress plugin) 2.0 | earliest → 2.0.3 | No fix stated |
Other CVEs of uListing (WordPress plugin)
The 6 CVEs of uListing (WordPress plugin) →
CVE-2021-36874
Authenticated Insecure Direct Object References (IDOR) vulnerability in WordPress uListing plugin (versions <= 2.0.5)
7.1
High
CVE-2021-36877
Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin…
4.3
Medium
CVE-2021-36876
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in WordPress uListing plugin…
5.4
Medium
CVE-2021-36879
Unauthenticated Privilege Escalation vulnerability in WordPress uListing plugin (versions <= 2.0.5)
9.8
Critical