Browse CVEs

HIGH 8.8 CVE-2025-48136 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Estatik Mortgage Calculator … Mortgage Calculator after 2.0.12 Fix from $1,9502025-05-16 CRITICAL 9.8 CVE-2023-6049 The Estatik Real Estate Plugin WordPress plugin before 4.1.1 unserializes user input via some of its cookies, which could allow unauthenticated users… Estatik 4.1.1+ Fix from $2,3002024-01-15 MEDIUM 6.5 CVE-2023-6048 The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not prevent user with low privileges on the site, like subscribers, from setting an… Estatik 4.1.1+ Fix from $1,6002024-01-15 MEDIUM 6.1 CVE-2023-6050 The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not sanitise and escape various parameters and generated URLs before outputting the… Estatik 4.1.1+ Fix from $1,6002024-01-15 MEDIUM 6.1 CVE-2023-28490 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Estatik Estatik Mortgage Calculator plugin <= 2.0.7 versions. Estatik Mortgage Calculator after 2.0.7 Fix from $1,6002023-09-27 MEDIUM 6.1 CVE-2023-40601 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Estatik Estatik Mortgage Calculator plugin <= 2.0.7 versions. Estatik Mortgage Calculator after 2.0.7 Fix from $1,6002023-09-06 HIGH 7.5 CVE-2016-10958 The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via es_media_images[] to wp-admin/admin-ajax.php. Estatik 2.3.0+ Fix from $1,9502019-09-16 MEDIUM 6.5 CVE-2016-10959 The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload (exploitable with CSRF) via es_media_images[] to wp-admin/admin… Estatik 2.3.1+ Fix from $1,6002019-09-16