Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: passionui Clear all filters
TI-2025-11532 CVE-2025-12577 · GHSA-jrcv-5r3m-cwr3

Missing authorization in passionui Listar – Directory Listing & Classifieds WordPress…

Priority LOW 19

The Listar – Directory Listing & Classifieds WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-json/listar/v1/place/save' REST API endp…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00201 Published 2025-12-06 No fix listed CWE-862
TI-2025-11529 CVE-2025-12574 · GHSA-rpq4-5445-xpc4

Missing authorization in passionui Listar – Directory Listing & Classifieds WordPress…

Priority LOW 19

The Listar – Directory Listing & Classifieds WordPress Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the '/wp-json/listar/v1/place/delete' REST API endpoint i…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00201 Published 2025-12-06 No fix listed CWE-862