Stylemix uListing vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Stylemix uListing: 4 record(s), with affected versions and fixes.

CVE-2026-62033 High · 7.6 CWE-862 Oct 10, 2026

WordPress uListing plugin <= 2.2.0 - Settings Change vulnerability

Subscriber Settings Change in uListing <= 2.2.0 versions.

CVE-2026-62031 Critical · 9.3 CWE-89 Oct 10, 2026

WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in uListing <= 2.2.0 versions.

CVE-2026-28078 Medium · 4.9 CWE-22 Mar 5, 2026

WordPress uListing plugin <= 2.2.0 - Arbitrary File Download vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Stylemix uListing ulisting allows Path Traversal.This issue affects uListing: from n/a through <= 2.2.0.

CVE-2026-28138 High · 7.2 CWE-502 Feb 26, 2026

WordPress uListing plugin <= 2.2.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects uListing: from n/a through <= 2.2.0.