CVE-2023-6049

CVE-2023-6049: Estatik Real Estate Plugin < 4.1.1 - Unauthenticated PHP Object Injection

Vendor Unknown
Product Estatik Real Estate Plugin
Published January 15, 2024
Last update June 3, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Estatik Real Estate Plugin WordPress plugin before 4.1.1 unserializes user input via some of its cookies, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget chain is present on the blog

Key dates

02Disclosure timeline

January 15, 2024 CVE published
June 3, 2025 Record updated