Read the docs

realtyworkstation

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

realtyworkstation records in CISA KEV

No realtyworkstation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Realty Workstation 2 records HIGH

Records

3 records

TI-2024-33920 CVE-2024-50489 · GHSA-23cv-7mvx-jcq6

WordPress Realty Workstation plugin <= 1.0.45 - Account Takeover vulnerability

Priority HIGH 82

Authentication Bypass Using an Alternate Path or Channel vulnerability in realtyworkstation Realty Workstation realty-workstation allows Authentication Bypass.This issue affects Realty Workstation: from n/a through <= 1.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00535 Published 2024-10-28 No fix listed CWE-288
TI-2025-17244 CVE-2025-23477 · GHSA-cp68-4943-vr56

WordPress Realty Workstation plugin <= 1.0.45 - Broken Access Control vulnerability

Priority MEDIUM 42

Missing Authorization vulnerability in realtyworkstation Realty Workstation realty-workstation allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Realty Workstation: from n/a through <= 1.…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00488 Published 2025-01-21 No fix listed CWE-862
TI-2022-01559 CVE-2022-1691 · GHSA-xch6-4wp4-m47p

Realty Workstation < 1.0.15 - Agent SQLi

Priority LOW 24

The Realty Workstation WordPress plugin before 1.0.15 does not sanitise and escape the trans_edit parameter before using it in a SQL statement when an agent edit a transaction, leading to an SQL injection

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01006 Published 2022-06-06 Fixed in 1.0.15 CWE-89
Open these records in search →