Product by Stylemix
Directory Listings Wordpress Plugin – Ulisting
12 known vulnerabilities in Directory Listings Wordpress Plugin – Ulisting (Stylemix), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-4381 | uListing <= 1.6.6 - Unauthenticated Options Changes via wp_route | 9.8 | |
| Critical | CVE-2021-4343 | uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation | 9.8 | |
| Critical | CVE-2021-4370 | uListing <= 1.6.6 - Missing Authorization | 9.8 | |
| Critical | CVE-2021-4346 | uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes | 9.8 | |
| Critical | CVE-2021-4340 | uListing <= 1.6.6 - Unauthenticated SQL Injection | 9.8 | |
| Critical | CVE-2021-4341 | uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX | 9.8 | |
| Critical | CVE-2021-4357 | uListing <= 1.6.6 - Unauthenticated Arbitrary Post/Page Deletion | 9.1 | |
| High | CVE-2021-4339 | uListing <= 1.6.6 - Unauthenticated Information Disclosure | 7.5 | |
| High | CVE-2025-1653 | Stylemix Directory Listings WordPress plugin: Incorrect Privilege Assignment | 8.8 | |
| High | CVE-2025-1657 | Stylemix Directory Listings WordPress plugin: Missing Authorization | 8.8 | |
| Medium | CVE-2021-4345 | uListing <= 1.6.6 - Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion | 6.5 | |
| Medium | CVE-2021-36875 | Stylemix Directory Listings WordPress plugin: Cross-site Scripting | 5.9 |