CVE-2025-23857: WordPress Essential WP Real Estate Plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability
Published Feb 14, 2025
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SmartDataSoft Essential WP Real Estate essential-wp-real-estate allows Reflected XSS.This issue affects Essential WP Real Estate: from n/a through <= 1.1.3.
Affected Software
3 affected components
SmartDataSoft Essential Wp Real Estate Wordpress<=1.1.3
NotFound Essential WP Real Estate<=1.1.3
WordPress Essential WP Real Estate Plugin<=1.1.3
Event History
Feb 14, 2025
CVE Published
via MITRE·12:44 PM
Data Sourced
via MITRE·12:44 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-23857?
CVE-2025-23857 is classified as a reflected cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2025-23857?
To fix CVE-2025-23857, update the Essential WP Real Estate plugin to version 1.1.4 or later.
3
Which versions are affected by CVE-2025-23857?
CVE-2025-23857 affects Essential WP Real Estate versions up to and including 1.1.3.
4
What type of vulnerability is CVE-2025-23857?
CVE-2025-23857 is an improper neutralization of input during web page generation vulnerability.
5
Is CVE-2025-23857 specific to a particular WordPress plugin?
Yes, CVE-2025-23857 specifically affects the NotFound Essential WP Real Estate plugin.