CVE-2021-36879: WordPress uListing plugin <= 2.0.5 - Unauthenticated Privilege Escalation vulnerability
Published Sep 27, 2021
·Updated
Unauthenticated Privilege Escalation vulnerability in WordPress uListing plugin (versions <= 2.0.5). Possible if WordPress configuration allows user registration.
Affected Software
1 affected component
StylemixThemes Ulisting Wordpress<=2.0.5
Remediation
Information
Update to 2.0.6 or higher version.
Event History
Sep 27, 2021
CVE Published
via MITRE·03:32 PM
Data Sourced
via MITRE·03:32 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this WordPress uListing plugin vulnerability?
The vulnerability ID for this WordPress uListing plugin vulnerability is CVE-2021-36879.
2
What is the severity of CVE-2021-36879?
The severity of CVE-2021-36879 is critical with a severity value of 9.8.
3
What is the affected software for CVE-2021-36879?
The affected software for CVE-2021-36879 is the uListing plugin for WordPress versions up to and including 2.0.5.
4
How can the vulnerability be exploited?
The vulnerability can be exploited by an unauthenticated attacker if WordPress configuration allows user registration.
5
Is there a patch or fix available for CVE-2021-36879?
Yes, a patch or fix is available for CVE-2021-36879. Please refer to the provided references for more information.