Description
WordPress Plugin WP-Property-WordPress Powered Real Estate and Property Management is prone to an information disclosure vulnerability because it fails to properly sanitize user-supplied input. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. WordPress Plugin WP-Property-WordPress Powered Real Estate and Property Management version 1.38.3.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.38.4 or latest
References
Related Vulnerabilities
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Cross-Site Request Forgery (3.8.9)
WordPress Plugin Memphis Documents Library Multiple Unspecified Vulnerabilities (3.6.21)
Jenkins Improper Authentication Vulnerability (CVE-2014-2062)
WordPress Plugin OdiHost Newsletter 'openstat.php' SQL Injection (1.0)