Read the docs

Realestateconnected

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Realestateconnected records in CISA KEV

No Realestateconnected vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Easy Property Listings 6 records MEDIUM

Records

6 records

TI-2024-02678 CVE-2024-2869 · GHSA-wr8q-wf72-mf6m

Easy Property Listings <= 3.5.3 - Admin+ Stored XSS

Priority MEDIUM 55

The Easy Property Listings WordPress plugin before 3.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when th…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00326 Published 2025-05-15 Fixed in 3.5.4 CWE-79
TI-2024-02963 CVE-2024-3163 · GHSA-vrm8-8c2f-82r7

Easy Property Listings < 3.5.4 - Arbitrary Contact Deletion via CSRF

Priority MEDIUM 53

The Easy Property Listings WordPress plugin before 3.5.4 does not have CSRF check when deleting contacts in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00226 Published 2024-09-12 Fixed in 3.5.4 CWE-352
TI-2020-04500 CVE-2020-5530 · GHSA-mfxm-33mp-3rqj

Cross-site request forgery in Merv Barrett Easy Property Listings

Priority MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00818 Published 2020-02-18 Fixed in 3.4 CWE-352
TI-2024-01762 CVE-2024-1893 · GHSA-q7jc-6mj7-vqp9

Easy Property Listings <= 3.5.2 - Authenticated(Contributor+) SQL Injection via Shortcode

Priority LOW 39

The Easy Property Listings plugin for WordPress is vulnerable to time-based SQL Injection via the ‘property_status’ shortcode attribute in all versions up to, and including, 3.5.2 due to insufficient escaping on the user…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00773 Published 2024-04-09 No fix listed CWE-89
Open these records in search →