CVE-2021-36876: Stylemixthemes Ulisting

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in WordPress uListing plugin (versions <= 2.0.5) as it lacks CSRF checks on plugin administration pages.

Affected products

• Stylemixthemes Ulisting: up to and including 2.0.5

Published 2021-09-27. Last modified 2026-06-17.