What’s Vulnerable › Products

Stylemix uListing vulnerabilities

29 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your Stylemix uListing version is affected

Latest Stylemix uListing vulnerabilities

• CVE-2026-62033 — WordPress uListing plugin <= 2.2.0 - Settings Change vulnerability (CVSS 7.6)
• CVE-2026-62031 — WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2026-27392 — WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2026-27391 — WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability (CVSS 5.4)
• CVE-2026-28078 — WordPress uListing plugin <= 2.2.0 - Arbitrary File Download vulnerability (CVSS 4.9)
• CVE-2026-28138 — WordPress uListing plugin <= 2.2.0 - PHP Object Injection vulnerability (CVSS 7.2)
• CVE-2025-32662 — WordPress uListing plugin <= 2.2.0 - Deserialization of untrusted data vulnerability (CVSS 8.8)
• CVE-2025-32122 — WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability (CVSS 7.6)
• CVE-2025-1657 — Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object Injection (CVSS 8.8)
• CVE-2025-1653 — Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Subscriber+) Privilege Escalation (CVSS 8.8)
• CVE-2025-25150 — WordPress uListing plugin <= 2.1.6 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2025-25151 — WordPress uListing Plugin <= 2.1.6 - SQL Injection vulnerability (CVSS 8.5)
• CVE-2024-47344 — WordPress uListing plugin <= 2.1.5 - Sensitive Data Exposure vulnerability (CVSS 5.3)
• CVE-2021-4381 — uListing <= 1.6.6 - Unauthenticated Options Changes via wp_route (CVSS 9.8)
• CVE-2021-4370 — uListing <= 1.6.6 - Missing Authorization (CVSS 9.8)
• CVE-2021-4357 — uListing <= 1.6.6 - Unauthenticated Arbitrary Post/Page Deletion (CVSS 5.3)
• CVE-2021-4346 — uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes (CVSS 7.5)
• CVE-2021-4345 — uListing <= 1.6.6 - Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion (CVSS 5.3)
• CVE-2021-4343 — uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation (CVSS 9.8)
• CVE-2021-4341 — uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX (CVSS 9.8)
• CVE-2021-4340 — uListing <= 1.6.6 - Unauthenticated SQL Injection (CVSS 7.5)
• CVE-2021-4339 — uListing <= 1.6.6 - Unauthenticated Information Disclosure (CVSS 5.3)
• CVE-2021-36880 — WordPress uListing plugin <= 2.0.3 - Unauthenticated SQL Injection (SQLi) vulnerability (CVSS 9.8)
• CVE-2021-36879 — WordPress uListing plugin <= 2.0.5 - Unauthenticated Privilege Escalation vulnerability (CVSS 9.8)
• CVE-2021-36877 — WordPress uListing plugin <= 2.0.5 - Modify User Roles via Cross-Site Request Forgery (CSRF) vulnerability (CVSS 6.5)