Vulnerabilities and Security Researches

Estatik Real Estate Plugin, CVE-2025-26905

CVE, Research URL: CVE-2025-26905
Home page URL: Security reports for Estatik Real Estate Plugin
Application: Estatik Real Estate Plugin
Published on: Feb 25, 2025
Research Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Estatik Estatik allows PHP Local File Inclusion. This issue affects Estatik: from n/a through 4.1.9.
Affected versions: max 4.1.9.
Status: vulnerable