EUVD-2026-54390
GHSA-jqr2-6x6h-fvmp
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CSRF inherently requires victim interaction (UI:R); attacker reads victim data (C:H) and misdirects victim actions (I:H); no availability impact applies.
Primary rating from Vendor (WPScan).
CVSS VectorVendor: WPScan
Lifecycle Timeline
4DescriptionCVE.org
The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not bind its OAuth social login flow to the initiating user session, allowing an unauthenticated attacker to log a victim into an attacker-controlled account (login CSRF), so that the victim's subsequent activity is stored under and readable by the attacker.
AnalysisAI
Login CSRF in the Estatik Real Estate Plugin for WordPress (before 4.3.3) enables an unauthenticated attacker to hijack a victim's session by tricking them into completing an OAuth social login flow bound to an attacker-controlled account. Once the victim is logged in as the attacker, all subsequent activity - property searches, saved listings, contact forms, personal profile data - is captured and readable by the attacker. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the Estatik Real Estate Plugin's OAuth social login feature is enabled and configured on the target WordPress site, which is a non-default configuration requiring active setup by the site administrator. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | There is a notable conflict between the provided CVSS vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) and the vulnerability description. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Update the Estatik Real Estate Plugin to version 4.3.3 or later, which is confirmed available from the vendor per the WPScan advisory at https://wpscan.com/vulnerability/5930f82f-8dc8-41b1-8b78-c71883e7ef22/. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all WordPress installations using Estatik Real Estate Plugin versions prior to 4.3.3 and assess exposure scope, particularly those configured with OAuth social login. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Estatik Real Estate Plugin
View allOpen email relay in the Estatik Real Estate Plugin for WordPress (before 4.3.3) allows unauthenticated remote attackers
Email injection in the Estatik Real Estate Plugin for WordPress (versions before 4.3.4) allows unauthenticated remote us
Same weakness CWE-352 – Cross-Site Request Forgery (CSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today