CVE-2023-6139: Essential Real Estate < 4.4.0 - Subscriber+ Denial of Service via Arbitrary Option Update
The Essential Real Estate WordPress plugin before 4.4.0 does not apply proper capability checks on its AJAX actions, which among other things, allow attackers with a subscriber account to conduct Denial of Service attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6139?
CVE-2023-6139 has a medium severity rating as it allows unauthorized users to perform Denial of Service attacks.
How do I fix CVE-2023-6139?
To mitigate CVE-2023-6139, update the Essential Real Estate WordPress plugin to version 4.4.0 or later.
What are the potential impacts of CVE-2023-6139?
CVE-2023-6139 can enable attackers with a subscriber account to disrupt the availability of the site through Denial of Service attacks.
Who is affected by CVE-2023-6139?
Users of the Essential Real Estate WordPress plugin prior to version 4.4.0 are vulnerable to CVE-2023-6139.
What actions can attackers perform due to CVE-2023-6139?
Attackers can exploit CVE-2023-6139 to perform Denial of Service attacks, affecting the performance and availability of impacted WordPress sites.