Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Directory Listings WordPress plugin – uListing 1.7

  • Severity: critical
  • Status: Open
  • Publication: October 28, 2021

The uListing plugin for WordPress is a tool that allows users to create and manage listings on their WordPress website. Unfortunately, versions up to and including 1.6.6 of the plugin have a security vulnerability that makes it possible for unauthenticated attackers to access sensitive information from the website’s database. This is due to the lack of sufficient protection against malicious inputs and insufficient preparation of existing SQL queries.

Detected in:

Directory Listings WordPress plugin – uListing open vulnerable versions: >= * < 1.7

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.