Plugin icon

WPCasa – Real Estate for WordPress

wpcasa

Vulnerabilities:

4

Last Updated:

September 8, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2025-10-16
Title
WPCasa < 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.4.2
CVSS
6.4 (medium)
Published
2025-09-22
Title
WPCasa < 1.4.2 - Unauthenticated Code Injection
Fixed in
Fixed in 1.4.2
CVSS
9.8 (critical)
Published
2025-04-16
Title
WPCasa < 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.4.0
CVSS
6.4 (medium)
Published
2024-12-02
Title
WPCasa < 1.3.0 - Insecure Direct Object Reference
Fixed in
Fixed in 1.3.0
CVSS
5.3 (medium)