CVE-2026-27392 Stylemix CVE debrief

Who should care

Defenders responsible for uListing plugin installations, security teams, and vulnerability management teams should be aware of this vulnerability and assess potential exposure.

Why it matters

CVE-2026-27392 is a Broken Access Control vulnerability in uListing plugin versions <= 2.2.0, with a CVSS score of 4.3 and MEDIUM severity. Defenders should prioritize verifying exposure and assessing potential impacts on user access control.

• Verification of uListing plugin versions <= 2.2.0 is required to determine exposure
• Potential impacts on user access control need to be assessed
• Monitoring for potential exploitation attempts is recommended

Technical summary

The CVE record describes a Broken Access Control vulnerability in uListing plugin versions <= 2.2.0. The vulnerability has a CVSS score of 4.3 and is considered MEDIUM severity.

Defensive priority

Defenders should prioritize verifying exposure of uListing plugin versions <= 2.2.0 and assessing potential impacts on user access control.

Recommended defensive actions

• Verify uListing plugin versions <= 2.2.0 are not in use
• Assess potential impacts on user access control
• Monitor for potential exploitation attempts

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability. Further verification is required to determine the scope of affected systems and potential impacts.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.