Wpopal Opal Estate
By the Year
In 2024 there have been 0 vulnerabilities in Wpopal Opal Estate . Last year Opal Estate had 3 security vulnerabilities published. Right now, Opal Estate is on track to have less security vulnerabilities in 2024 than it did last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2024 | 0 | 0.00 |
| 2023 | 3 | 7.05 |
| 2022 | 0 | 0.00 |
| 2021 | 0 | 0.00 |
| 2020 | 0 | 0.00 |
| 2019 | 0 | 0.00 |
| 2018 | 0 | 0.00 |
It may take a day or so for new Opal Estate vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Wpopal Opal Estate Security Vulnerabilities
The Opal Estate plugin for WordPress is vulnerable to featured property modifications in versions up to, and including, 1.6.11
CVE-2021-4388
5.3 - Medium
- July 01, 2023
The Opal Estate plugin for WordPress is vulnerable to featured property modifications in versions up to, and including, 1.6.11. This is due to missing capability checks on the opalestate_set_feature_property() and opalestate_remove_feature_property() functions. This makes it possible for unauthenticated attackers to set and remove featured properties.
AuthZ
The Opal Estate plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.11
CVE-2021-4387
8.8 - High
- July 01, 2023
The Opal Estate plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.11. This is due to missing or incorrect nonce validation on the opalestate_set_feature_property() and opalestate_remove_feature_property() functions. This makes it possible for unauthenticated attackers to set and remove featured properties via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Session Riding
** REJECT ** CVE split into individual CVE IDs for each software record.
CVE-2021-4342
- June 07, 2023
** REJECT ** CVE split into individual CVE IDs for each software record.
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Rucyproject Rucy or by Wpopal? Click the Watch button to subscribe.
