Skip to content
OpenAdvisories

Vendor

pragmaticmates

1 known vulnerabilities.

Products

Realia 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2023-4277

    Realia <= 1.4.0 - Cross-Site Request Forgery to User Email Change

    The Realia plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.0. This is due to missing nonce validation on the 'process_change_profile_form' function. This makes it possible for unauthenticated attackers to…

    pragmaticmates Realia Web / CMS