| Package | Affected versions | Patched versions |
|---|---|---|
| opal estate | ≤ 1.6.11 |
The Opal Estate plugin for WordPress is vulnerable to featured property modifications in versions up to, and including, 1.6.11. This is due to missing capability checks on the opalestate_set_feature_property() and opalestate_remove_feature_property() functions. This makes it possible for unauthenticated attackers to set and remove featured properties.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free