Product by Stylemix

    Stylemix uListing

    23 known vulnerabilities in Stylemix uListing (Stylemix), 0 of them actively exploited (CISA KEV).

    Key figures

    23

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    9

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Stylemix uListing (Stylemix)
    CriticalCVE-2021-4381

    uListing <= 1.6.6 - Unauthenticated Options Changes via wp_route

    also in 2 other products

    		9.8
    CriticalCVE-2021-4370

    uListing <= 1.6.6 - Missing Authorization

    also in 2 other products

    		9.8
    CriticalCVE-2021-4343

    uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation

    also in 2 other products

    		9.8
    CriticalCVE-2021-4346

    uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes

    also in 2 other products

    		9.8
    CriticalCVE-2021-4340

    uListing <= 1.6.6 - Unauthenticated SQL Injection

    also in 2 other products

    		9.8
    CriticalCVE-2021-4341

    uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX

    also in 2 other products

    		9.8
    CriticalCVE-2021-4357

    uListing <= 1.6.6 - Unauthenticated Arbitrary Post/Page Deletion

    also in 2 other products

    		9.1
    CriticalCVE-2026-62031

    WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability

    		9.3
    HighCVE-2026-62033

    WordPress uListing plugin <= 2.2.0 - Settings Change vulnerability

    		7.6
    HighCVE-2021-4339

    uListing <= 1.6.6 - Unauthenticated Information Disclosure

    also in 2 other products

    		7.5
    HighCVE-2025-1653

    Stylemix Directory Listings WordPress plugin: Incorrect Privilege Assignment

    also in 2 other products

    		8.8
    HighCVE-2025-32662

    WordPress uListing plugin <= 2.2.0 - Deserialization of untrusted data vulnerability

    		8.8
    HighCVE-2025-32122

    WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability

    		7.6
    CriticalCVE-2025-25150

    WordPress uListing plugin <= 2.1.6 - SQL Injection vulnerability

    		9.3
    HighCVE-2025-1657

    Stylemix Directory Listings WordPress plugin: Missing Authorization

    also in 2 other products

    		8.8
    HighCVE-2025-25151

    WordPress uListing Plugin <= 2.1.6 - SQL Injection vulnerability

    		8.5
    HighCVE-2026-28138

    WordPress uListing plugin <= 2.2.0 - PHP Object Injection vulnerability

    		7.2
    MediumCVE-2021-4345

    uListing <= 1.6.6 - Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion

    also in 2 other products

    		6.5
    MediumCVE-2021-36875

    Stylemix Directory Listings WordPress plugin: Cross-site Scripting

    also in 2 other products

    		5.9
    MediumCVE-2026-27391

    WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability

    		5.4
    MediumCVE-2026-28078

    WordPress uListing plugin <= 2.2.0 - Arbitrary File Download vulnerability

    		4.9
    MediumCVE-2026-27392

    WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability

    		4.3
    MediumCVE-2024-47344

    WordPress uListing plugin <= 2.1.5 - Sensitive Data Exposure vulnerability

    		5.3

    All products by Stylemix