Directory Listings WordPress plugin – uListing vulnerabilities

2 known vulnerabilities in Directory Listings WordPress plugin – uListing from Stylemix. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Directory Listings WordPress plugin – uListing: Missing Authorization

  CVE-2025-1657Mar 15, 2025Stylemix

  The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to unauthorized modification of data and PHP Object Injection due to a missing capability check on the stm_listing_ajax AJAX action in all versions up to, and including, 2.2.

• 8.8 High severity

  Directory Listings WordPress plugin – uListing: Incorrect Privilege Assignment

  CVE-2025-1653Mar 15, 2025Stylemix

  The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.2.0. This is due to the stm_listing_profile_edit AJAX action not having enough restriction on the user meta th