FireStorm Plugins FireStorm Professional Real Estate SQL Injection Vulnerability
Vulnerability
A blind SQL injection vulnerability has been identified in the FireStorm Professional Real Estate plugin, specifically in versions through 2.7.11. This vulnerability arises from improper neutralization of special elements used in SQL commands, allowing malicious actors to interact with the database in unauthorized ways.
Impact
Exploitation of this vulnerability could lead to unauthorized database access, allowing attackers to manipulate or steal information.
Added: Jan 22, 2026, 7:32 PM
Updated: Jan 22, 2026, 7:32 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
4.8remediation
0.0relevance
2.2threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.