Read the docs

WP-Property

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

WP-Property records in CISA KEV

No WP-Property vulnerabilities are listed in CISA KEV.

Records

1 record

Priority HIGH 81

WP-Property plugin for WordPress up to and including version 1.35.0 contains an unauthenticated file upload vulnerability in the third-party `uploadify.php` script.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02101 Published 2025-08-05 No fix listed CWE-434
Open these records in search →