Stylemix Directory Listings WordPress plugin – uListing

• CVE-2025-1653 High 8.8 Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Subscriber+) Privilege Escalation 0.5%
• CVE-2025-1657 High 8.8 Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update and PHP Object Injection 0.4%
• CVE-2021-4381 Critical 9.8 uListing <= 1.6.6 - Unauthenticated Options Changes via wp_route 1.4%
• CVE-2021-4370 Critical 9.8 uListing <= 1.6.6 - Missing Authorization 1.4%
• CVE-2021-4357 Critical 9.1 uListing <= 1.6.6 - Unauthenticated Arbitrary Post/Page Deletion 1.0%
• CVE-2021-4345 Medium 6.5 uListing <= 1.6.6 - Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion 0.7%
• CVE-2021-4346 Critical 9.8 uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes 1.2%
• CVE-2021-4343 Critical 9.8 uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation 1.4%
• CVE-2021-4341 Critical 9.8 uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX 1.1%
• CVE-2021-4340 Critical 9.8 uListing <= 1.6.6 - Unauthenticated SQL Injection 1.2%
• CVE-2021-4339 High 7.5 uListing <= 1.6.6 - Unauthenticated Information Disclosure 0.9%
• CVE-2021-36875 Medium 5.9 WordPress uListing plugin <= 2.0.5 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability 0.8%