CVE-2023-6141

5.4 mediumEPSS 0.4%

Medium (5.4) in g5plus essential real estate. EPSS 0.4% chance of exploitation in the next 30 days.

The Essential Real Estate WordPress plugin before 4.4.0 does not apply proper capability checks on its AJAX actions, which among other things, allow attackers with a subscriber account to conduct Stored XSS attacks.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-01-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

g5plus:essential_real_estate

References

https://wpscan.com/vulnerability/df12513b-9664-45be-8824-2924bfddf364
https://wpscan.com/vulnerability/df12513b-9664-45be-8824-2924bfddf364

Check your stack JSON