Essential Real Estate vulnerabilities
We track 1 vulnerability in Essential Real Estate products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 8, 2024.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Essential Real Estate vulnerabilities
- 8.8 High severity
Essential Real Estate: Unrestricted Upload of File with Dangerous Type
The Essential Real Estate WordPress plugin before 4.4.0 does not prevent users with limited privileges on the site, like subscribers, from momentarily uploading malicious PHP files disguised as ZIP archives, which may lead to remote code execution.