Estatik Real Estate Plugin

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Estatik Real Estate Plugin

Information

Software Type Plugin
Software Slug estatik (view on wordpress.org)
Software Status Active
Software Author estatik
Software Website estatik.net
Software Downloads 411,166
Software Active Installs 10,000
Software Record Last Updated September 12, 2026

10 Vulnerabilities

Submit a Vulnerability
Estatik Real Estate Plugin <= 4.3.4 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2026-81775
Sep 2, 2026
Researcher: Neelakandan A
Estatik Real Estate Plugin < 4.3.4 - Unauthenticated Mail Relay
5.3
CVE-2026-18044
Aug 20, 2026
Researcher: Erwan LR
Estatik <= 4.3.2 - Cross-Site Request Forgery
4.3
CVE-2026-16262
Aug 3, 2026
Researcher: Yaswanth Reddy Sunkara
Estatik <= 4.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-62963
Oct 16, 2025
Researcher: Peter Thaleikis
Estatik <= 4.3.1 - Authenticated (Contributor+) Local File Inclusion
8.8
CVE-2025-26905
Feb 23, 2025
Researcher: João Pedro Soares de Alcântara
Estatik Real Estate Plugin <= 4.1.0 - Reflected Cross-Site Scripting
6.1
CVE-2023-6050
Jan 25, 2024
Researcher: Erwan LR
Estatik Real Estate Plugin <= 4.1.0 - Unauthenticated PHP Object Injection
9.8
CVE-2023-6049
Dec 25, 2023
Researcher: Krzysztof Zając
Estatik Real Estate Plugin <= 4.1.0 - Missing Authorization to Limited Arbitrary Options Update
5.4
CVE-2023-6048
Dec 25, 2023
Researcher: Krzysztof Zając
Estatik <= 2.3.0 - Cross-Site Request Forgery to Arbitrary File Upload
8.8
CVE-2016-10959
Aug 1, 2016
Researchers:
Estatik <= 2.2.5 - Unauthenticated Arbitrary File Upload
9.8
CVE-2016-10958
Aug 1, 2016
Researchers:
Title Status CVE ID CVSS Researchers Date
Estatik Real Estate Plugin <= 4.3.4 - Unauthenticated Stored Cross-Site Scripting Unpatched CVE-2026-81775 7.2 Neelakandan A September 2, 2026
Estatik Real Estate Plugin < 4.3.4 - Unauthenticated Mail Relay Patched CVE-2026-18044 5.3 Erwan LR August 20, 2026
Estatik <= 4.3.2 - Cross-Site Request Forgery Patched CVE-2026-16262 4.3 Yaswanth Reddy Sunkara August 3, 2026
Estatik <= 4.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting Unpatched CVE-2025-62963 6.4 Peter Thaleikis October 16, 2025
Estatik <= 4.3.1 - Authenticated (Contributor+) Local File Inclusion Patched CVE-2025-26905 8.8 João Pedro Soares de Alcântara February 23, 2025
Estatik Real Estate Plugin <= 4.1.0 - Reflected Cross-Site Scripting Patched CVE-2023-6050 6.1 Erwan LR January 25, 2024
Estatik Real Estate Plugin <= 4.1.0 - Unauthenticated PHP Object Injection Patched CVE-2023-6049 9.8 Krzysztof Zając December 25, 2023
Estatik Real Estate Plugin <= 4.1.0 - Missing Authorization to Limited Arbitrary Options Update Patched CVE-2023-6048 5.4 Krzysztof Zając December 25, 2023
Estatik <= 2.3.0 - Cross-Site Request Forgery to Arbitrary File Upload Patched CVE-2016-10959 8.8 August 1, 2016
Estatik <= 2.2.5 - Unauthenticated Arbitrary File Upload Patched CVE-2016-10958 9.8 August 1, 2016

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation