Estatik Real Estate Plugin
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:estatik_real_estate_plugin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Estatik Real Estate Plugin (e6e9f461-513f-5dbd-a774-cd02f1d95222) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-6050 |
vulnerable | 2026-06-08 06:19:45.463116 |
Estatik Real Estate Plugin < 4.1.1 - Reflected XSS
The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not sanitise and escape various parameters and generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Published: 2024-01-15T15:10:42.097Z
Updated: 2025-06-03T14:00:22.782Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6049 |
vulnerable | 2026-06-08 06:19:45.462720 |
Estatik Real Estate Plugin < 4.1.1 - Unauthenticated PHP Object Injection
The Estatik Real Estate Plugin WordPress plugin before 4.1.1 unserializes user input via some of its cookies, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget chain is present on the blog
Published: 2024-01-15T15:10:39.151Z
Updated: 2025-06-03T14:00:44.618Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6048 |
vulnerable | 2026-06-08 06:19:45.461145 |
Estatik Real Estate Plugin < 4.1.1 - Subscriber+ Arbitrary Option Update
The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not prevent user with low privileges on the site, like subscribers, from setting any of the site's options to 1, which could be used to break sites and lead to DoS when certain options are reset
Published: 2024-01-15T15:10:40.683Z
Updated: 2025-06-03T14:00:30.846Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.