📦 Essential Real Estate

This vulnerability allows attackers to include local files on the server through improper filename control in PHP include/require statements. It affects WordPress sites using the Essential Real Estate...

This vulnerability allows attackers to include local files on the server through PHP's include/require statements in the Essential Real Estate WordPress plugin. Attackers can potentially read sensitiv...

The Essential Real Estate WordPress plugin before version 4.4.0 allows low-privileged users like subscribers to upload malicious PHP files disguised as ZIP archives. This vulnerability could lead to r...

The Essential Real Estate WordPress plugin has an authorization vulnerability that allows authenticated users with subscriber-level access or higher to delete arbitrary file attachments. This affects ...