9.8
Critique
CVE-2021-36879 Unauthenticated Privilege Escalation vulnerability in WordPress uListing plugin (versions <= 2.0.5)
Description
Unauthenticated Privilege Escalation vulnerability in WordPress uListing plugin (versions <= 2.0.5). Possible if WordPress configuration allows user registration.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| uListing (WordPress plugin) 2.0 | premières → 2.0.5 | Pas de correctif indiqué |
Autres CVE de uListing (WordPress plugin)
Les 6 CVE de uListing (WordPress plugin) →
CVE-2021-36880
Unauthenticated SQL Injection (SQLi) vulnerability in WordPress uListing plugin…
8.6
Élevée
CVE-2021-36874
Authenticated Insecure Direct Object References (IDOR) vulnerability in WordPress uListing plugin (versions <= 2.0.5)
7.1
Élevée
CVE-2021-36877
Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin…
4.3
Moyenne
CVE-2021-36876
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in WordPress uListing plugin…
5.4
Moyenne