CVE-2021-36878

概要

参考情報

• patchstack.com/database/vulnerability/ulisting/wordpress-ulisting-plugin-2-0-5-settings-update-via-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory
• wordpress.org/plugins/ulisting · Product

ulisting のその他の脆弱性

• CVE-2025-1657高 8.8The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to unauthorized modification of data and PHP Object In…
• CVE-2025-1653高 8.8The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and inc…
• CVE-2021-4381緊急 9.8The uListing plugin for WordPress is vulnerable to authorization bypass via wp_route due to missing capability checks, and a missing securit…
• CVE-2021-4370緊急 9.8The uListing plugin for WordPress is vulnerable to authorization bypass as most actions and endpoints are accessible to unauthenticated user…
• CVE-2021-4357中 5.3The uListing plugin for WordPress is vulnerable to authorization bypass due to missing capability checks, and a missing security nonce, on t…