Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in Directory Listings WordPress plugin – uListing 1.7

  • Severity: high-risk
  • Status: Open
  • Publication: January 28, 2021

The uListing plugin for WordPress is vulnerable to a security issue which may allow an unauthenticated attacker to access information that they should not have access to. In versions up to and including 1.6.6 the plugin did not properly check if the user who is trying to access the information has the right to do so. This could allow them to access a list of all users and their associated email addresses in the database.

Detected in:

Directory Listings WordPress plugin – uListing open vulnerable versions: >= * < 1.7

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.