WordPress Mortgage Calculator Estatik Plugin <= 2.0.11 is vulnerable to Cross Site Scripting (XSS)

Software Mortgage Calculator Estatik Type Plugin Vulnerable versions = 2.0.11 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28490 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 71ec944fa1a2 Credits minhtuanac...

CVE-2016-10959

The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload exploitable with CSRF via esmediaimages to wp-admin/admin-ajax.php...

CVE-2016-10958

The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via esmediaimages to wp-admin/admin-ajax.php...

CVE-2016-10959

The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload exploitable with CSRF via esmediaimages to wp-admin/admin-ajax.php...

CVE-2016-10958

The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via esmediaimages to wp-admin/admin-ajax.php...

Cross site request forgery (csrf)

The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload exploitable with CSRF via esmediaimages to wp-admin/admin-ajax.php...

Default credentials

The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via esmediaimages to wp-admin/admin-ajax.php...

CVE-2016-10959

The issue CVE-2016-10959 affects the Estatik WordPress plugin prior to 2.3.1. The vulnerability allows authenticated arbitrary file upload through es_media_images[] to wp-admin/admin-ajax.php, exploitable with CSRF. Impact details in sources indicate an authenticated path enabling file upload, wi...

CVE-2016-10959

The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload exploitable with CSRF via esmediaimages to wp-admin/admin-ajax.php...

CVE-2016-10958

The CVE-2016-10958 entry concerns the Estatik WordPress plugin (before 2.3.0) with unauthenticated arbitrary file upload via es_media_images[] to wp-admin/admin-ajax.php. This is a concrete vulnerability detail; CVSS metrics indicate high severity (C/I) with network access. Public details confirm...

CVE-2016-10958

The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via esmediaimages to wp-admin/admin-ajax.php...

WordPress Estatik Plugin <= 2.2.5 - Arbitrary File Upload Vulnerability

A file uploaded vulnerability is in WordPress Estatik Plugin in v2.2.5. The issue is in the function espropmediaimages, it allows to upload a file for anyone. Solution Update the plugin...

WordPress Estatik Plugin <= 2.2.5 - Arbitrary File Upload

Because of this vulnerability, an attacker can upload the arbitrary file and put it in the current month’s directory inside of the /wp-content/uploads/ directory. Solution Update the plugin...

Estatik < 2.3.1 - Arbitrary File Upload

The Estatik Real Estate Plugin WordPress plugin was affected by an Arbitrary File Upload security vulnerability...