CVE-2025-23477 WordPress Realty Workstation plugin <= 1.0.45 - Broken Access Control vulnerability

Missing Authorization vulnerability in realtyworkstation Realty Workstation realty-workstation allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Realty Workstation: from n/a through = 1.0.45...

CVE-2025-23477: Missing Authorization

Missing Authorization vulnerability in realtyworkstation Realty Workstation realty-workstation allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Realty Workstation: from n/a through = 1.0.45...

WordPress plugin Realty Workstation 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress Realty Workstation plugin <= 1.0.45 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by ghsinfosec in WordPress Plugin Realty Workstation versions = 1.0.45...

CVE-2024-53726

CVE-2024-53726 describes a Cross-Site Request Forgery (CSRF) leading to Stored XSS in the WordPress plugin RealtyCandy IDX Broker Extended (versions

CVE-2024-51786

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bestweblayout Realty by BestWebSoft realty allows Stored XSS.This issue affects Realty by BestWebSoft: from n/a through = 1.1.5...

CVE-2024-51786

CVE-2024-51786 is an XSS vulnerability in the WordPress plugin Realty by BestWebSoft. Affected are Realty by BestWebSoft versions up to 1.1.5 (inclusive). Root cause: improper neutralization of input during web page generation leading to Stored XSS. Impacted contexts can execute scripts in the vi...

WordPress plugin Realty by BestWebSoft 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2024-34912 · Bestwebsoft · Realty

Name of the Vulnerable Software and Affected Versions: Realty by BestWebSoft versions 1.1.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: Fo...

CVE-2024-51786: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bestweblayout Realty by BestWebSoft realty allows Stored XSS.This issue affects Realty by BestWebSoft: from n/a through = 1.1.5...

WordPress Realty by BestWebSoft plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Realty by BestWebSoft versions = 1.1.5...

WordPress Realty by BestWebSoft Plugin <= 1.1.5 is vulnerable to Cross Site Scripting (XSS)

Software Realty by BestWebSoft Type Plugin Vulnerable versions = 1.1.5 Fixed in 1.1.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51786 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4df8b0c61c8a Credits SOPROBRO Required privilege...

CVE-2024-50489

Authentication Bypass Using an Alternate Path or Channel vulnerability in Realty Workstation allows Authentication Bypass.This issue affects Realty Workstation: from n/a through 1.0.45...

CVE-2024-50489

Authentication Bypass Using an Alternate Path or Channel vulnerability in realtyworkstation Realty Workstation realty-workstation allows Authentication Bypass.This issue affects Realty Workstation: from n/a through = 1.0.45...

CVE-2024-50489 WordPress Realty Workstation plugin <= 1.0.45 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in realtyworkstation Realty Workstation realty-workstation allows Authentication Bypass.This issue affects Realty Workstation: from n/a through = 1.0.45...

CVE-2024-50489

CVE-2024-50489 concerns the WordPress Realty Workstation plugin (versions

CVE-2024-50489 WordPress Realty Workstation plugin <= 1.0.45 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in realtyworkstation Realty Workstation realty-workstation allows Authentication Bypass.This issue affects Realty Workstation: from n/a through = 1.0.45...

WordPress plugin Realty Workstation 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-34266 · Unknown · Realty Workstation

Name of the Vulnerable Software and Affected Versions: Realty Workstation versions 1.0.0 through 1.0.45 Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel vulnerability in Realty Workstation, allowing unauthorized access. Recommendations: For versions...

CVE-2024-50489: Authentication Bypass Using an Alternate Path or Channel

Authentication Bypass Using an Alternate Path or Channel vulnerability in realtyworkstation Realty Workstation realty-workstation allows Authentication Bypass.This issue affects Realty Workstation: from n/a through = 1.0.45...