cleantalk
Vulnerabilities and Security Researches

Directory Listings WordPress plugin – uListing, 46004451db0cd2f930648d53b8f73f08d09c2106

Published on
Jan 28, 2021
Research Description
Directory Listings WordPress plugin &#8211; uListing [ulisting] < 1.7 uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX The uListing plugin for WordPress is vulnerable to authorization bypass via Ajax due to missing capability checks, missing input validation, and a missing security nonce in the stm_update_email_data AJAX action in versions up to, and including, 1.6.6. This makes it possible for unauthenticated attackers to change any WordPress option in the database.
Affected versions
max 1.7.
Status
vulnerable