0
CRITICAL
0
HIGH
1
MEDIUM
0
LOW
0
POC
0
KEV
Monthly
The Essential WP Real Estate plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the cl_delete_listing_func() function in all versions up to, and including,. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Authentication Bypass
WordPress
Essential Wp Real Estate
NVD
CVSS 3.1
5.3
EPSS
0.3%
CVE-2024-13318
EPSS 0%
CVSS 5.3
MEDIUM
This Month
The Essential WP Real Estate plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the cl_delete_listing_func() function in all versions up to, and including,. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Authentication Bypass
WordPress
Essential Wp Real Estate
NVD