Read the docs

Estatik

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

Estatik records in CISA KEV

No Estatik vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Estatik 5 records HIGH Estatik Mortgage Calculator 2 records LOW Mortgage Calculator 1 record MEDIUM

Records

5 records in Estatik · all components

TI-2023-05570 CVE-2023-6049 · GHSA-5fvv-qqh5-frx3

Estatik Real Estate Plugin < 4.1.1 - Unauthenticated PHP Object Injection

Priority HIGH 82

The Estatik Real Estate Plugin WordPress plugin before 4.1.1 unserializes user input via some of its cookies, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget chain is presen…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00926 Published 2024-01-15 Fixed in 4.1.1 CWE-502
TI-2023-05569 CVE-2023-6048 · GHSA-g9mm-pm8r-4ggj

Estatik Real Estate Plugin < 4.1.1 - Subscriber+ Arbitrary Option Update

Priority MEDIUM 62

The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not prevent user with low privileges on the site, like subscribers, from setting any of the site's options to 1, which could be used to break sites and le…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0061 Published 2024-01-15 Fixed in 4.1.1 CWE-862
TI-2023-05571 CVE-2023-6050 · GHSA-x2vc-c3wq-5j89

Estatik Real Estate Plugin < 4.1.1 - Reflected XSS

Priority MEDIUM 60

The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not sanitise and escape various parameters and generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting which c…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0042 Published 2024-01-15 Fixed in 4.1.1 CWE-79
Open these records in search →