← All credits
Original researcher - m0ze (Patchstack Red Team)
6 vulnerability records and advisories credit this contributor.
CVE-2021-36880
WordPress uListing plugin <= 2.0.3 - Unauthenticated SQL Injection (SQLi) vulnerability
CVE-2021-36878
WordPress uListing plugin <= 2.0.5 - Settings Update via Cross-Site Request Forgery (CSRF) vulnerability
CVE-2021-36879
WordPress uListing plugin <= 2.0.5 - Unauthenticated Privilege Escalation vulnerability
CVE-2021-36876
WordPress uListing plugin <= 2.0.5 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
CVE-2021-36877
WordPress uListing plugin <= 2.0.5 - Modify User Roles via Cross-Site Request Forgery (CSRF) vulnerability
CVE-2021-36874
WordPress uListing plugin <= 2.0.5 - Authenticated Insecure Direct Object References (IDOR) vulnerability