uListing vulnerabilities

3 known vulnerabilities in uListing from StylemixThemes. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  uListing: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-62031Oct 10, 2026StylemixThemes

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes uListing ulisting allows Blind SQL Injection.This issue affects uListing: from n/a through 2.2.0.

• 8.8 High severity

  Directory Listings WordPress plugin – uListing: Missing Authorization

  CVE-2025-1657Mar 15, 2025Stylemix

  The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to unauthorized modification of data and PHP Object Injection due to a missing capability check on the stm_listing_ajax AJAX action in all versions up to, and including, 2.2.

• 8.8 High severity

  Directory Listings WordPress plugin – uListing: Incorrect Privilege Assignment

  CVE-2025-1653Mar 15, 2025Stylemix

  The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.2.0. This is due to the stm_listing_profile_edit AJAX action not having enough restriction on the user meta th