The Essential Real Estate WordPress plugin prior to 4.4.0 does not apply proper capability checks on its AJAX actions, which among other things, allow attackers with a subscriber account to conduct Denial of Service attacks.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
g5plus essential real estate |