GCVE - cpe:2.3:a:realtyworkstation:realty_workstation:*:*:*:*:*:wordpress:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:realtyworkstation:realty_workstation:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Realtyworkstation (`f7b0a095-a9b4-5989-8c50-32d58aa5c870`)
Product	Realty Workstation (`2e635f66-d70f-5272-b0bd-45f10794fd54`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-50489`	vulnerable	2026-06-08 06:52:10.237894	WordPress Realty Workstation plugin <= 1.0.45 - Account Takeover vulnerability CRITICAL (9.8) Authentication Bypass Using an Alternate Path or Channel vulnerability in realtyworkstation Realty Workstation realty-workstation allows Authentication Bypass.This issue affects Realty Workstation: from n/a through <= 1.0.45. Published: 2024-10-28T11:16:17.653Z Updated: 2026-05-12T22:56:50.923Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/realty-workstation/vulnerability/wordpress-realty-workstation-plugin-1-0-45-account-takeover-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1691`	vulnerable	2026-06-08 05:39:13.714059	Realty Workstation < 1.0.15 - Agent SQLi The Realty Workstation WordPress plugin before 1.0.15 does not sanitise and escape the trans_edit parameter before using it in a SQL statement when an agent edit a transaction, leading to an SQL injection Published: 2022-06-06T08:51:27.000Z Updated: 2024-08-03T00:10:03.803Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/f9363b4c-c434-4f15-93f8-46162d2d7049 https://bulletin.iese.de/post/realty-workstation_1-0-6	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.