Essential Real Estate
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:essential_real_estate:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Essential Real Estate (acf70e42-a24b-5c33-b53c-92b8cd94015c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-6141 |
vulnerable | 2026-06-08 06:19:46.330523 |
Essential Real Estate < 4.4.0 - Subscriber+ Stored XSS
The Essential Real Estate WordPress plugin before 4.4.0 does not apply proper capability checks on its AJAX actions, which among other things, allow attackers with a subscriber account to conduct Stored XSS attacks.
Published: 2024-01-08T19:00:35.602Z
Updated: 2025-06-18T16:04:52.195Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6140 |
vulnerable | 2026-06-08 06:19:46.330121 |
Essential Real Estate < 4.4 - Subscriber+ Arbitrary File Upload
The Essential Real Estate WordPress plugin before 4.4.0 does not prevent users with limited privileges on the site, like subscribers, from momentarily uploading malicious PHP files disguised as ZIP archives, which may lead to remote code execution.
Published: 2024-01-08T19:00:36.658Z
Updated: 2024-09-04T15:36:41.937Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6139 |
vulnerable | 2026-06-08 06:19:46.328662 |
Essential Real Estate < 4.4.0 - Subscriber+ Denial of Service via Arbitrary Option Update
The Essential Real Estate WordPress plugin before 4.4.0 does not apply proper capability checks on its AJAX actions, which among other things, allow attackers with a subscriber account to conduct Denial of Service attacks.
Published: 2024-01-08T19:00:31.085Z
Updated: 2025-06-03T14:34:52.005Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3933 |
vulnerable | 2026-06-08 05:48:22.654521 |
Essential Real Estate < 3.9.6 - Reflected Cross-Site-Scripting
The Essential Real Estate WordPress plugin before 3.9.6 does not sanitize and escapes some parameters, which could allow users with a role as low as Admin to perform Cross-Site Scripting attacks.
Published: 2022-12-12T17:54:37.527Z
Updated: 2025-04-22T15:11:08.659Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.