5.9
Medium
CVE-2021-36875 Cross-site Scripting (XSS) vulnerability in Stylemix Directory Listings WordPress plugin – uListing allows Reflected…
Description
Cross-site Scripting (XSS) vulnerability in Stylemix Directory Listings WordPress plugin – uListing allows Reflected XSS.This issue affects Directory Listings WordPress plugin – uListing: from n/a through 2.0.5.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Directory Listings WordPress plugin – uListing 2.0 | earliest → 2.0.5 | No fix stated |
Other CVEs of Directory Listings WordPress plugin – uListing
The 12 CVEs of Directory Listings WordPress plugin – uListing →
CVE-2025-1653
The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to Privilege Escalation in all…
8.8
High
CVE-2025-1657
The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to unauthorized modification of…
8.8
High
CVE-2021-4381
The uListing plugin for WordPress is vulnerable to authorization bypass via wp_route due to missing capability checks,…
9.8
Critical
CVE-2021-4370
The uListing plugin for WordPress is vulnerable to authorization bypass as most actions and endpoints are accessible…
9.8
Critical