TI-2026-86164 CVE-2026-104913 · GHSA-v8wh-4xxv-rwqj
Arbitrary file upload in Interactive Real Estate WordPress plugin
Priority MEDIUM 41
The Interactive Real Estate – Floor Plan & Building Visualizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.6.0 via the extract_zip_data function.