WordPress Real Estate Manager Plugin Code Injection Vulnerability Allowing Arbitrary Code Execution

A code injection vulnerability has been identified in the WordPress Real Estate Manager plugin, affecting versions through 7.3. This vulnerability allows for arbitrary code execution on the affected site.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code on the affected WordPress site, potentially allowing attackers to take control of the site or execute malicious actions.

Remediation

Users of the WordPress Real Estate Manager plugin are advised to remove and replace the plugin, as it is likely abandoned and will not receive further updates or fixes. Patchstack has issued a virtual patch to mitigate this vulnerability by blocking attacks until an official fix is available.