CVE-2026-62031: WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability
Published Oct 10, 2026
·Updated
Unauthenticated SQL Injection in uListing <= 2.2.0 versions.
Affected Software
1 affected component
StylemixThemes uListing<=2.2.0
Event History
Oct 10, 2026
CVE Published
via MITRE·07:35 PM
Data Sourced
via MITRE·07:35 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An unauthenticated remote attacker can exploit it; no WordPress account or user interaction is required.
2
Which installations are affected?
StylemixThemes uListing versions 2.2.0 and earlier are affected. The available information does not identify any configuration prerequisite.
3
What is the likely security impact?
The vulnerability is rated critical with network access, low attack complexity, no privileges, and no user interaction required. Its vector indicates high confidentiality impact and low availability impact, while integrity impact is rated none.