Vulnerability · Published Dec 15, 2023 · Assigned by Wordfence

CVE-2023-6827Essential Real Estate <= 4.3.5 - Authenticated (Subscriber+) Arbitrary File Upload

High 7.5

In plain English

A high-severity unrestricted file upload in Essential Real Estate from g5theme. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 70% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)1.3%top 30.2% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

The Essential Real Estate plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'ajaxUploadFonts' function in versions up to, and including, 4.3.5. This makes it possible for authenticated attackers with subscriber-level capabilities or above, to upload arbitrary files on the affected site's server which may make remote code execution possible. CVE-2023-6140 appears to be a duplicate of this issue.

Affected products (as reported)

Vendor	Product	Versions
g5theme	Essential Real Estate	0 – through 4.3.5

Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

In plain English

Official description

Affected products (as reported)

References