Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: realtyworkstation Clear all filters
TI-2025-17244 CVE-2025-23477 · GHSA-cp68-4943-vr56

WordPress Realty Workstation plugin <= 1.0.45 - Broken Access Control vulnerability

Priority MEDIUM 42

Missing Authorization vulnerability in realtyworkstation Realty Workstation realty-workstation allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Realty Workstation: from n/a through <= 1.…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00488 Published 2025-01-21 No fix listed CWE-862
TI-2024-33920 CVE-2024-50489 · GHSA-23cv-7mvx-jcq6

WordPress Realty Workstation plugin <= 1.0.45 - Account Takeover vulnerability

Priority HIGH 82

Authentication Bypass Using an Alternate Path or Channel vulnerability in realtyworkstation Realty Workstation realty-workstation allows Authentication Bypass.This issue affects Realty Workstation: from n/a through <= 1.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00535 Published 2024-10-28 No fix listed CWE-288
TI-2022-01559 CVE-2022-1691 · GHSA-xch6-4wp4-m47p

Realty Workstation < 1.0.15 - Agent SQLi

Priority LOW 24

The Realty Workstation WordPress plugin before 1.0.15 does not sanitise and escape the trans_edit parameter before using it in a SQL statement when an agent edit a transaction, leading to an SQL injection

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01006 Published 2022-06-06 Fixed in 1.0.15 CWE-89