4.3
Moyenne
CVE-2021-36877 Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin…
Description
Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin (versions <= 2.0.5) makes it possible for attackers to modify user roles.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| uListing (WordPress plugin) 2.0 | premières → 2.0.5 | Pas de correctif indiqué |
Autres CVE de uListing (WordPress plugin)
Les 6 CVE de uListing (WordPress plugin) →
CVE-2021-36880
Unauthenticated SQL Injection (SQLi) vulnerability in WordPress uListing plugin…
8.6
Élevée
CVE-2021-36874
Authenticated Insecure Direct Object References (IDOR) vulnerability in WordPress uListing plugin (versions <= 2.0.5)
7.1
Élevée
CVE-2021-36876
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in WordPress uListing plugin…
5.4
Moyenne
CVE-2021-36879
Unauthenticated Privilege Escalation vulnerability in WordPress uListing plugin (versions <= 2.0.5)
9.8
Critique