CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-4239

The Real Estate Manager plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 6.7.1 due to insufficient restriction on the 'rem_save_profile_front' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'wp_capabilities' parameter during a profile update.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 22.8%

CVSS Severity

CVSS v3 Score 8.8

References

Products affected by CVE-2023-4239

Webcodingplace » Real Estate Manager » Version: N/A

cpe:2.3:a:webcodingplace:real_estate_manager:-
Webcodingplace » Real Estate Manager » Version: 3.0

cpe:2.3:a:webcodingplace:real_estate_manager:3.0
Webcodingplace » Real Estate Manager » Version: 3.1

cpe:2.3:a:webcodingplace:real_estate_manager:3.1
Webcodingplace » Real Estate Manager » Version: 3.2

cpe:2.3:a:webcodingplace:real_estate_manager:3.2
Webcodingplace » Real Estate Manager » Version: 3.3

cpe:2.3:a:webcodingplace:real_estate_manager:3.3
Webcodingplace » Real Estate Manager » Version: 3.4

cpe:2.3:a:webcodingplace:real_estate_manager:3.4
Webcodingplace » Real Estate Manager » Version: 3.5

cpe:2.3:a:webcodingplace:real_estate_manager:3.5
Webcodingplace » Real Estate Manager » Version: 3.6

cpe:2.3:a:webcodingplace:real_estate_manager:3.6
Webcodingplace » Real Estate Manager » Version: 3.7

cpe:2.3:a:webcodingplace:real_estate_manager:3.7
Webcodingplace » Real Estate Manager » Version: 3.8

cpe:2.3:a:webcodingplace:real_estate_manager:3.8
Webcodingplace » Real Estate Manager » Version: 3.9

cpe:2.3:a:webcodingplace:real_estate_manager:3.9
Webcodingplace » Real Estate Manager » Version: 4.0

cpe:2.3:a:webcodingplace:real_estate_manager:4.0
Webcodingplace » Real Estate Manager » Version: 4.1

cpe:2.3:a:webcodingplace:real_estate_manager:4.1
Webcodingplace » Real Estate Manager » Version: 4.2

cpe:2.3:a:webcodingplace:real_estate_manager:4.2
Webcodingplace » Real Estate Manager » Version: 4.3

cpe:2.3:a:webcodingplace:real_estate_manager:4.3
Webcodingplace » Real Estate Manager » Version: 4.4

cpe:2.3:a:webcodingplace:real_estate_manager:4.4
Webcodingplace » Real Estate Manager » Version: 4.4.6

cpe:2.3:a:webcodingplace:real_estate_manager:4.4.6
Webcodingplace » Real Estate Manager » Version: 4.4.7

cpe:2.3:a:webcodingplace:real_estate_manager:4.4.7
Webcodingplace » Real Estate Manager » Version: 4.5

cpe:2.3:a:webcodingplace:real_estate_manager:4.5
Webcodingplace » Real Estate Manager » Version: 4.8

cpe:2.3:a:webcodingplace:real_estate_manager:4.8
Webcodingplace » Real Estate Manager » Version: 4.8.8

cpe:2.3:a:webcodingplace:real_estate_manager:4.8.8
Webcodingplace » Real Estate Manager » Version: 5.0

cpe:2.3:a:webcodingplace:real_estate_manager:5.0
Webcodingplace » Real Estate Manager » Version: 5.1

cpe:2.3:a:webcodingplace:real_estate_manager:5.1
Webcodingplace » Real Estate Manager » Version: 5.2

cpe:2.3:a:webcodingplace:real_estate_manager:5.2
Webcodingplace » Real Estate Manager » Version: 6.0

cpe:2.3:a:webcodingplace:real_estate_manager:6.0
Webcodingplace » Real Estate Manager » Version: 6.2

cpe:2.3:a:webcodingplace:real_estate_manager:6.2
Webcodingplace » Real Estate Manager » Version: 6.4

cpe:2.3:a:webcodingplace:real_estate_manager:6.4
Webcodingplace » Real Estate Manager » Version: 6.5

cpe:2.3:a:webcodingplace:real_estate_manager:6.5
Webcodingplace » Real Estate Manager » Version: 6.7.1

cpe:2.3:a:webcodingplace:real_estate_manager:6.7.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-4239

Products

Pricing

Contact Us