CVE-2021-36880 Unauthenticated SQL Injection (SQLi) vulnerability in WordPress uListing plugin…

Description

Unauthenticated SQL Injection (SQLi) vulnerability in WordPress uListing plugin (versions <= 2.0.3), vulnerable parameter: custom.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
uListing (WordPress plugin) 2.0	premières → 2.0.3	Pas de correctif indiqué

Autres CVE de uListing (WordPress plugin)

Les 6 CVE de uListing (WordPress plugin) →

CVE-2021-36874 Authenticated Insecure Direct Object References (IDOR) vulnerability in WordPress uListing plugin (versions <= 2.0.5) 7.1 Élevée CVE-2021-36877 Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin… 4.3 Moyenne CVE-2021-36876 Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in WordPress uListing plugin… 5.4 Moyenne CVE-2021-36879 Unauthenticated Privilege Escalation vulnerability in WordPress uListing plugin (versions <= 2.0.5) 9.8 Critique