Lucene search

K
G5themeEssential Real Estate

7 matches found

CVE
CVE
added 2024/01/08 7:15 p.m.50 views

CVE-2023-6141

The Essential Real Estate WordPress plugin before 4.4.0 does not apply proper capability checks on its AJAX actions, which among other things, allow attackers with a subscriber account to conduct Stored XSS attacks.

5.4CVSS5.1AI score0.00255EPSS
CVE
CVE
added 2024/12/12 7:15 a.m.47 views

CVE-2024-12329

The Essential Real Estate plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on several pages/post types in all versions up to, and including, 5.1.6. This makes it possible for authenticated attackers, with Contributor-level access and above, to acce...

4.3CVSS4.3AI score0.00079EPSS
CVE
CVE
added 2024/02/12 8:15 a.m.45 views

CVE-2024-24797

Deserialization of Untrusted Data vulnerability in G5Theme ERE Recently Viewed – Essential Real Estate Add-On.This issue affects ERE Recently Viewed – Essential Real Estate Add-On: from n/a through 1.3.

9.8CVSS9.4AI score0.00433EPSS
CVE
CVE
added 2024/01/08 7:15 p.m.41 views

CVE-2023-6139

The Essential Real Estate WordPress plugin before 4.4.0 does not apply proper capability checks on its AJAX actions, which among other things, allow attackers with a subscriber account to conduct Denial of Service attacks.

6.5CVSS6.3AI score0.00298EPSS
CVE
CVE
added 2024/01/08 7:15 p.m.39 views

CVE-2023-6140

The Essential Real Estate WordPress plugin before 4.4.0 does not prevent users with limited privileges on the site, like subscribers, from momentarily uploading malicious PHP files disguised as ZIP archives, which may lead to remote code execution.

8.8CVSS9AI score0.03888EPSS
CVE
CVE
added 2024/06/04 6:15 a.m.31 views

CVE-2024-4273

The Essential Real Estate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ere_property_map' shortcode in all versions up to, and including, 4.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for au...

6.4CVSS5.9AI score0.00225EPSS
CVE
CVE
added 2024/06/04 6:15 a.m.26 views

CVE-2024-4274

The Essential Real Estate plugin for WordPress is vulnerable to unauthorized loss of data due to insufficient validation on the remove_property_attachment_ajax() function in all versions up to, and including, 4.4.2. This makes it possible for authenticated attackers, with subscriber-level access an...

4.3CVSS4.8AI score0.00253EPSS