SmartDataSoft

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

SmartDataSoft records in CISA KEV

No SmartDataSoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Essential Wp Real Estate 3 records MEDIUM Smartblog 2 records HIGH Car Repair Services & Auto Mechanic 1 record LOW Clasify Classified Listing 1 record MEDIUM

Records

3 records in Essential Wp Real Estate · all components

TI-2024-12390 CVE-2024-13347 · GHSA-6qgj-99vr-vrh7

Essential WP Real Estate <= 1.1.3 - Reflected XSS

MEDIUM 63

The Essential WP Real Estate WordPress plugin through 1.1.3 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting.

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00595 Published 2025-02-03 No fix listed CWE-79

TI-2025-17624 CVE-2025-23857 · GHSA-8qrq-ggw5-w3f4

WordPress Essential WP Real Estate Plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SmartDataSoft Essential WP Real Estate essential-wp-real-estate allows Reflected XSS.This issue affects Essential WP R…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00255 Published 2025-02-14 No fix listed CWE-79

TI-2024-12362 CVE-2024-13318 · GHSA-4557-p767-895m

Essential WP Real Estate <= 1.1.3 - Missing Authorization to Arbitrary Post/Page Deletion

LOW 30

The Essential WP Real Estate plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the cl_delete_listing_func() function in all versions up to, and including, 1.1.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00349 Published 2025-01-10 No fix listed CWE-463

Open these records in search →

Critical	3
High	3
Medium	10
Low	0
No CVSS	0