Unrated severityNVD Advisory· Published Jan 8, 2024· Updated Jun 3, 2025
Essential Real Estate < 4.4.0 - Subscriber+ Denial of Service via Arbitrary Option Update
CVE-2023-6139
Description
The Essential Real Estate WordPress plugin before 4.4.0 does not apply proper capability checks on its AJAX actions, which among other things, allow attackers with a subscriber account to conduct Denial of Service attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: <4.4.0
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/96396a22-f523-4c51-8b72-52be266988aamitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.