WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
essential-real-estate
Published
2019-06-29
Title
Essential Real Estate <= 1.7.1 - XSS
Slug
essential-real-estate
Published
2022-11-17
Title
Essential Real Estate < 3.9.6 - Reflected Cross-Site-Scripting
Slug
essential-real-estate
Published
2023-12-14
Title
Essential Real Estate < 4.4.0 - Subscriber+ Arbitrary File Upload
Slug
essential-real-estate
Published
2023-12-18
Title
Essential Real Estate < 4.4.0 - Subscriber+ Denial of Service via Arbitrary Option Update
Slug
essential-real-estate
Published
2023-12-18
Title
Essential Real Estate < 4.4.0 - Subscriber+ Stored XSS
Slug
essential-real-estate
Published
2023-12-18
Title
Essential Real Estate < 4.4.0 - Subscriber+ Arbitrary File Upload
Slug
essential-real-estate
Published
2024-06-03
Title
Essential Real Estate < 4.4.5 - Insecure Direct Object Reference to Arbitrary Attachment Deletion
Slug
essential-real-estate
Published
2024-06-03
Title
Essential Real Estate < 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
essential-real-estate
Published
2024-12-11
Title
Essential Real Estate < 5.1.7 - Missing Authorization to Authenticated (Contributor+) Information Exposure
Slug
essential-real-estate
Published
2025-01-24
Title
Essential Real Estate < 5.1.9 - Cross-Site Request Forgery
Slug
essential-real-estate
Published
2025-03-27
Title
Essential Real Estate < 5.2.1 - Unauthenticated Local File Inclusion
Slug
essential-real-estate
Published
2025-05-21
Title
Essential Real Estate <= 5.2.1 - Unauthenticated Local File Inclusion
Slug
essential-real-estate
Published
2025-12-14
Title
Essential Real Estate <= 5.2.2 - Missing Authorization
Slug
essential-real-estate
Published
2025-12-14
Title
Essential Real Estate <= 5.2.2 - Authenticated (ERE Customer+) Insecure Direct Object Reference
Slug
essential-widgets
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
essential-widgets
Published
2025-11-26
Title
Essential Widgets < 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
essential-widgets
Published
2026-02-04
Title
Essential Widgets < 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
Slug
essential-wp-real-estate
Published
2025-01-09
Title
Essential WP Real Estate <= 1.1.3 - Unauthenticated Arbitrary Post/Page Deletion
Slug
essential-wp-real-estate
Published
2025-01-13
Title
Essential WP Real Estate <= 1.1.3 - Reflected XSS
Slug
essential-wp-real-estate
Published
2025-01-16
Title
Essential WP Real Estate <= 1.1.3 - Reflected Cross-Site Scripting
Slug
estatebud-properties-listings
Published
2025-01-20
Title
Estatebud – Properties & Listings <= 5.5.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
estatebud-properties-listings
Published
2025-03-24
Title
Estatebud – Properties & Listings <= 5.5.0 - Cross-Site Request Forgery to Settings Update
Slug
estatik
Published
2016-08-01
Title
Estatik < 2.3.1 - Arbitrary File Upload
Slug
estatik
Published
2023-12-25
Title
Estatik Real Estate Plugin < 4.1.1 - Unauthenticated PHP Object Injection
Slug
estatik
Published
2023-12-25
Title
Estatik Real Estate Plugin < 4.1.1 - Reflected XSS