Essential Real Estate, CVE-2023-6140

CVE, Research URL: CVE-2023-6140
Home page URL: Security reports for Essential Real Estate
Application: Essential Real Estate
Published on: Jan 09, 2024
Research Description: The Essential Real Estate WordPress plugin before 4.4.0 does not prevent users with limited privileges on the site, like subscribers, from momentarily uploading malicious PHP files disguised as ZIP archives, which may lead to remote code execution.
Affected versions: Min -, max 4.4.
Status: vulnerable