Known vulnerabilities in the Ulisting plugin
20 security advisories have been published for the Ulisting plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- uListing - Broken Access Control (CVE-2026-27391) MEDIUM
- uListing - Broken Access Control (CVE-2026-27392) MEDIUM
- Ulisting - PHP Object Injection (CVE-2025-1657) HIGH
- Ulisting - Privilege Escalation (CVE-2025-1653) HIGH
- Ulisting - Broken Access Control (CVE-2021-4381) CRITICAL
- Ulisting - Broken Access Control (CVE-2021-4370) CRITICAL
- Ulisting - Broken Access Control (CVE-2021-4357) CRITICAL
- Ulisting - Security Vulnerability (CVE-2021-4346) CRITICAL
- Ulisting - Security Vulnerability (CVE-2021-4343) CRITICAL
- Ulisting - Broken Access Control (CVE-2021-4341) CRITICAL
- Ulisting - SQL Injection (CVE-2021-4340) CRITICAL
- Ulisting - Broken Access Control (CVE-2021-4339) HIGH
- Ulisting - Broken Access Control (CVE-2021-4345) MEDIUM
- Ulisting - Privilege Escalation (CVE-2021-36879) CRITICAL
- Ulisting - SQL Injection (CVE-2021-36880) HIGH
- Ulisting - Security Vulnerability (CVE-2021-36874) HIGH
- Ulisting - Cross-Site Scripting (XSS) (CVE-2021-36875) MEDIUM
- Ulisting - Cross-Site Request Forgery (CSRF) (CVE-2021-36876) MEDIUM
- Ulisting - Cross-Site Request Forgery (CSRF) (CVE-2021-36877) MEDIUM
- Ulisting - Cross-Site Request Forgery (CSRF) (CVE-2021-36878) MEDIUM