Estatik Real Estate Plugin (Unknown) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-19. Vendor: Unknown.

CVEs of Estatik Real Estate Plugin

• CVE-2026-76790 - CVSS 7.1 (high), 2026-09-19: The Estatik Real Estate Plugin WordPress plugin before 4.3.5 does not sanitise and escape several values decoded from a request parameter before reflecting…
• CVE-2026-18044 - CVSS 3.7 (low), 2026-08-12: The Estatik Real Estate Plugin WordPress plugin before 4.3.4 does not validate the same recipient list that it later uses to address the message sent by its…
• CVE-2026-16262 - CVSS 7.5 (high), 2026-08-07: The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not bind its OAuth social login flow to the initiating user session, allowing an…
• CVE-2026-14547 - CVSS 5.3 (medium), 2026-08-06: The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not properly enforce its anti-spam check or restrict the recipient routing of its property…
• CVE-2023-6050 - CVSS 6.1 (medium), 2024-01-15: The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not sanitise and escape various parameters and generated URLs before outputting them back in…
• CVE-2023-6049 - CVSS 9.8 (critical), 2024-01-15: The Estatik Real Estate Plugin WordPress plugin before 4.1.1 unserializes user input via some of its cookies, which could allow unauthenticated users to…
• CVE-2023-6048 - CVSS 6.5 (medium), 2024-01-15: The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not prevent user with low privileges on the site, like subscribers, from setting any of the…