cleantalk
Vulnerabilities and Security Researches

Directory Listings WordPress plugin – uListing, CVE-2021-36877

CVE, Research URL

CVE-2021-36877

Published on
Sep 27, 2021
Research Description
Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin (versions <= 2.0.5) makes it possible for attackers to modify user roles.
Affected versions
Min -, max 2.0.6.
Status
vulnerable