CVE-2025-1653: Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Subscriber+) Privilege Escalation
The Directory Listings WordPress plugin – uListing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.2.0. This is due to the stmlistingprofileedit AJAX action not having enough restriction on the user meta that can be updated. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1653?
CVE-2025-1653 is categorized as a Privilege Escalation vulnerability affecting the uListing plugin for WordPress.
How do I fix CVE-2025-1653?
To fix CVE-2025-1653, update the uListing plugin to version 2.1.8 or later.
Who is affected by CVE-2025-1653?
All users of the Directory Listings uListing plugin for WordPress with versions up to 2.1.7 are affected by CVE-2025-1653.
What actions are vulnerable in CVE-2025-1653?
The stm_listing_profile_edit AJAX action in the uListing plugin lacks proper restrictions, leading to privilege escalation.
Is there a workaround for CVE-2025-1653?
There is no official workaround for CVE-2025-1653; users should upgrade to the latest plugin version.