Search vulnerabilities

Results 2

Export CSV
CVE-2024-50489

WordPress Realty Workstation plugin <= 1.0.45 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in realtyworkstation Realty Workstation realty-workstation allows Authentication Bypass.This issue affects Realty Workstation: from n/a through <= 1.0.45.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
CVE-2022-1691

Realty Workstation < 1.0.15 - Agent SQLi

The Realty Workstation WordPress plugin before 1.0.15 does not sanitise and escape the trans_edit parameter before using it in a SQL statement when an agent edit a transaction, leading to an SQL injection

CVSS 3.1 · 4.9 Medium EPSS 1.0% KEV · Not listed