uListing WordPress Plugin Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in the uListing WordPress plugin, specifically in the Directory Listings plugin by Stylemix, in all versions through 2.2.0. The issue arises because the stm_listing_profile_edit AJAX action lacks proper restrictions on the user meta that can be modified. This flaw enables authenticated attackers with Subscriber-level access or higher to elevate their privileges to that of an administrator.

Impact

Exploitation of this vulnerability allows authenticated users with Subscriber-level access to gain administrative privileges.

Remediation

No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.