Skip to content
OpenAdvisories

Vendor

mervb1

2 known vulnerabilities.

Products

Easy Property Listings 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-1893

    Easy Property Listings <= 3.5.2 - Authenticated(Contributor+) SQL Injection via Shortcode

    The Easy Property Listings plugin for WordPress is vulnerable to time-based SQL Injection via the ‘property_status’ shortcode attribute in all versions up to, and including, 3.5.2 due to insufficient escaping on the user supplied parameter and lack of suffici…

    mervb1 Easy Property Listings Web / CMS