Product by StylemixThemes

    Directory Listings WordPress plugin

    18 known vulnerabilities in Directory Listings WordPress plugin (StylemixThemes), 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    9

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Directory Listings WordPress plugin (StylemixThemes)
    CriticalCVE-2021-36879

    WordPress uListing plugin <= 2.0.5 - Unauthenticated Privilege Escalation vulnerability

    also in 1 other product

    		9.8
    CriticalCVE-2021-36880

    WordPress uListing plugin <= 2.0.3 - Unauthenticated SQL Injection (SQLi) vulnerability

    also in 1 other product

    		8.6
    CriticalCVE-2021-4381

    uListing <= 1.6.6 - Unauthenticated Options Changes via wp_route

    also in 1 other product

    		9.8
    CriticalCVE-2021-4370

    uListing <= 1.6.6 - Missing Authorization

    also in 1 other product

    		9.8
    CriticalCVE-2021-4343

    uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation

    also in 1 other product

    		9.8
    CriticalCVE-2021-4346

    uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes

    also in 1 other product

    		9.8
    CriticalCVE-2021-4340

    uListing <= 1.6.6 - Unauthenticated SQL Injection

    also in 1 other product

    		9.8
    CriticalCVE-2021-4341

    uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX

    also in 1 other product

    		9.8
    CriticalCVE-2021-4357

    uListing <= 1.6.6 - Unauthenticated Arbitrary Post/Page Deletion

    also in 1 other product

    		9.1
    HighCVE-2021-4339

    uListing <= 1.6.6 - Unauthenticated Information Disclosure

    also in 1 other product

    		7.5
    HighCVE-2021-36874

    StylemixThemes uListing (WordPress plugin): security vulnerability

    also in 1 other product

    		7.1
    HighCVE-2025-1653

    Stylemix Directory Listings WordPress plugin: Incorrect Privilege Assignment

    also in 1 other product

    		8.8
    HighCVE-2025-1657

    Stylemix Directory Listings WordPress plugin: Missing Authorization

    also in 1 other product

    		8.8
    MediumCVE-2021-4345

    uListing <= 1.6.6 - Unauthenticated Arbitrary Roles and Capabilities Creation/Deletion

    also in 1 other product

    		6.5
    MediumCVE-2021-36875

    Stylemix Directory Listings WordPress plugin: Cross-site Scripting

    also in 1 other product

    		5.9
    HighCVE-2021-36876

    WordPress uListing plugin <= 2.0.5 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

    also in 1 other product

    		5.4
    MediumCVE-2021-36877

    StylemixThemes uListing (WordPress plugin): Cross-Site Request Forgery (CSRF)

    also in 1 other product

    		4.3
    MediumCVE-2021-36878

    StylemixThemes uListing (WordPress plugin): Cross-Site Request Forgery (CSRF)

    also in 1 other product

    		4.3

    All products by StylemixThemes