Known vulnerabilities in Stylemix uListing

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-62033	Subscriber Settings Change in uListing <= 2.2.0 versions	7.6 High	Oct 10, 2026
CVE-2026-62031	Unauthenticated SQL Injection in uListing <= 2.2.0 versions	9.3 Critical	Oct 10, 2026
CVE-2026-27391	Subscriber Broken Access Control in uListing <= 2.2.0 versions	5.4 Medium	Jul 23, 2026
CVE-2026-27392	Contributor Broken Access Control in uListing <= 2.2.0 versions	4.3 Medium	Jul 23, 2026
CVE-2026-28078	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Stylemix uListing…	4.9 Medium	Mar 5, 2026
CVE-2026-28138	Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects…	7.2 High	Feb 26, 2026
CVE-2025-32662	Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects…	8.8 High	Apr 17, 2025
CVE-2025-32122	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix…	7.6 High	Apr 4, 2025
CVE-2025-25150	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix…	9.3 Critical	Mar 3, 2025
CVE-2025-25151	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix…	8.5 High	Feb 7, 2025
CVE-2024-47344	Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Stylemix uListing ulisting.This issue…	5.3 Medium	Oct 7, 2024