CVE Daily

CVE-2023-6139

The Essential Real Estate WordPress plugin before 4.4.0 does not apply proper ca...

Medium CVSS 6.5

Overview

The Essential Real Estate WordPress plugin before 4.4.0 does not apply proper capability checks on its AJAX actions, which among other things, allow attackers with a subscriber account to conduct Denial of Service attacks.

CWE: N/A Published: 2024-01-08T19:15:09.980
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.5 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags