Skip to content
OpenAdvisories

Product · SmartDataSoft

Essential WP Real Estate

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    Essential WP Real Estate <= 1.1.3 - Missing Authorization to Arbitrary Post/Page Deletion

    The Essential WP Real Estate plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the cl_delete_listing_func() function in all versions up to, and including, 1.1.3. This makes it possible for unauthenticated attackers…