CVE-2024-4274

The Essential Real Estate plugin for WordPress is vulnerable to unauthorized loss of data due to insufficient validation on the removepropertyattachmentajax function in all versions up to, and including, 4.4.2. This makes it possible for authenticated attackers, with subscriber-level access and...

PT-2024-30120

Name of the Vulnerable Software and Affected Versions The Essential Real Estate plugin for WordPress versions up to, and including, 4.4.2 Description The issue is related to insufficient validation on the remove property attachment ajax function, allowing authenticated attackers with...

WordPress Plugin WP Opal Estate 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...