Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: realtyworkstation Component: Realty Workstation Clear all filters
TI-2024-33920 CVE-2024-50489 · GHSA-23cv-7mvx-jcq6

WordPress Realty Workstation plugin <= 1.0.45 - Account Takeover vulnerability

Priority HIGH 82

Authentication Bypass Using an Alternate Path or Channel vulnerability in realtyworkstation Realty Workstation realty-workstation allows Authentication Bypass.This issue affects Realty Workstation: from n/a through <= 1.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00535 Published 2024-10-28 No fix listed CWE-288
TI-2022-01559 CVE-2022-1691 · GHSA-xch6-4wp4-m47p

Realty Workstation < 1.0.15 - Agent SQLi

Priority LOW 24

The Realty Workstation WordPress plugin before 1.0.15 does not sanitise and escape the trans_edit parameter before using it in a SQL statement when an agent edit a transaction, leading to an SQL injection

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01006 Published 2022-06-06 Fixed in 1.0.15 CWE-89