All 7 CVE vulnerabilities found in Estatik Real Estate Plugin, with AI-generated Chinese analysis, references, and POCs.
Vendor: Unknown
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-76790 | Estatik < 4.3.5 - Reflected XSS via get_listings hash Parameter | - | - | 2026-09-19 |
| CVE-2026-18044 | Estatik Real Estate Plugin < 4.3.4 - Unauthenticated Arbitrary-Recipient Mail Relay via Signed-Value Mismatch | 3.7 | Low | 2026-08-12 |
| CVE-2026-16262 | Estatik < 4.3.3 - Login CSRF | - | - | 2026-08-07 |
| CVE-2026-14547 | Estatik Real Estate Plugin < 4.3.3 - Unauthenticated Arbitrary-Recipient Mail Relay via Request Form | - | - | 2026-08-06 |
| CVE-2023-6050 | Estatik Real Estate Plugin < 4.1.1 - Reflected XSS | 6.1 | - | 2024-01-15 |
| CVE-2023-6048 | Estatik Real Estate Plugin < 4.1.1 - Subscriber+ Arbitrary Option Update | 6.5 | - | 2024-01-15 |
| CVE-2023-6049 | Estatik Real Estate Plugin < 4.1.1 - Unauthenticated PHP Object Injection | 9.8 | - | 2024-01-15 |
All 7 known CVE vulnerabilities affecting Estatik Real Estate Plugin with full Chinese analysis, references, and POCs where available.