CVE-2021-36880

HIGH CVSS: 8.6 Published: 2021-09-27 Modified: 2026-06-17

Description

Unauthenticated SQL Injection (SQLi) vulnerability in WordPress uListing plugin (versions <= 2.0.3), vulnerable parameter: custom.

Affected Platforms

Stylemixthemes Ulisting

Weakness Type

CWE-89, CWE-89

References