Threats tagged 'ghsa-qrc4-9pwh-5w2x'

The Essential Real Estate WordPress plugin versions before 5.3.5 contain a vulnerability where an AJAX action does not perform authorization or publication-status checks. This flaw allows unauthenticated users to access full details of unpublished property listings, including sensitive personal information of listing agents such as name, email, phone number, and office address.