Plugin icon

Estatik Real Estate Plugin

estatik

Vulnerabilities:

11

Last Updated:

September 10, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-09-17
Title
Estatik < 4.3.5 - Reflected XSS via get_listings hash Parameter
Fixed in
Fixed in 4.3.5
CVSS
7.1 (high)
Published
2026-09-02
Title
Estatik Real Estate Plugin <= 4.3.4 - Unauthenticated Stored Cross-Site Scripting
Fixed in
No known fix
CVSS
7.2 (high)
Published
2026-08-06
Title
Estatik Real Estate Plugin < 4.3.4 - Unauthenticated Arbitrary-Recipient Mail Relay via Signed-Value Mismatch
Fixed in
Fixed in 4.3.4
CVSS
3.7 (low)
Published
2026-08-03
Title
Estatik < 4.3.3 - Login CSRF
Fixed in
Fixed in 4.3.3
CVSS
4.2 (medium)
Published
2026-07-30
Title
Estatik Real Estate Plugin < 4.3.3 - Unauthenticated Arbitrary-Recipient Mail Relay via Request Form
Fixed in
Fixed in 4.3.3
CVSS
5.3 (medium)
Published
2025-10-16
Title
Estatik <= 4.3.5 - Contributor+ Stored XSS
Fixed in
No known fix
CVSS
5.9 (medium)
Published
2025-02-23
Title
Estatik < 4.3.2 - Contributor+ Local File Inclusion
Fixed in
Fixed in 4.3.2
CVSS
7.2 (high)
Published
2023-12-25
Title
Estatik Real Estate Plugin < 4.1.1 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 4.1.1
CVSS
8.1 (high)
Published
2023-12-25
Title
Estatik Real Estate Plugin < 4.1.1 - Subscriber+ Arbitrary Option Update
Fixed in
Fixed in 4.1.1
CVSS
7.1 (high)
Published
2023-12-25
Title
Estatik Real Estate Plugin < 4.1.1 - Reflected XSS
Fixed in
Fixed in 4.1.1
CVSS
7.1 (high)
Published
2016-08-01
Title
Estatik < 2.3.1 - Arbitrary File Upload
Fixed in
Fixed in 2.3.1
CVSS
7.5 (high)