CVE-2021-36877

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/ulisting/wordpress-ulisting-plugin-2-0-5-modify-user-roles-via-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory
• wordpress.org/plugins/ulisting · Third Party Advisory

Lỗ hổng khác của ulisting

• CVE-2025-1657CAO 8.8The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to unauthorized modification of data and PHP Object In…
• CVE-2025-1653CAO 8.8The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and inc…
• CVE-2021-4381NGHIÊM TRỌNG 9.8The uListing plugin for WordPress is vulnerable to authorization bypass via wp_route due to missing capability checks, and a missing securit…
• CVE-2021-4370NGHIÊM TRỌNG 9.8The uListing plugin for WordPress is vulnerable to authorization bypass as most actions and endpoints are accessible to unauthenticated user…
• CVE-2021-4357TRUNG BÌNH 5.3The uListing plugin for WordPress is vulnerable to authorization bypass due to missing capability checks, and a missing security nonce, on t…