CVE-2026-28138 | Stylemix uListing Plugin up to 2.2.0 on WordPress deserialization

A vulnerability was found in Stylemix uListing Plugin up to 2.2.0 on WordPress and classified as critical. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to deserialization.

The identification of this vulnerability is CVE-2026-28138. The attack may be launched remotely. There is no exploit available.