CVE-2023-6827

The Essential Real Estate plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'ajaxUploadFonts' function in versions up to, and including, 4.3.5. This makes it possible for authenticated attackers with subscriber-level capabilities or above, to upload arbitrary files on the affected site's server which may make remote code execution possible. CVE-2023-6140 appears to be a duplicate of this issue.

• CWE-434
• CWE-434

• https://plugins.trac.wordpress.org/browser/essential-real-estate/tags/4.3.5/lib/smart-framework/core/fonts/fonts.class.php#L524Product
• https://plugins.trac.wordpress.org/changeset/3009780/essential-real-estatePatch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/8bb2ce22-077b-41dd-a2ff-cc1db9d20d38?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/browser/essential-real-estate/tags/4.3.5/lib/smart-framework/core/fonts/fonts.class.php#L524Product
• https://plugins.trac.wordpress.org/changeset/3009780/essential-real-estatePatch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/8bb2ce22-077b-41dd-a2ff-cc1db9d20d38?source=cveThird Party Advisory

Published

Dec 15, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6819Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-6820Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-6821The Error Log Viewer by BestWebSoft WordPress plugin before …6.5
• CVE-2023-6824The WP Customer Area WordPress plugin before 8.2.1 does not …6.5
• CVE-2023-6825The File Manager and File Manager Pro plugins for WordPress …9.9
• CVE-2023-6826The E2Pdf plugin for WordPress is vulnerable to arbitrary fi…7.2
• CVE-2023-6828The Contact Form, Survey & Popup Form Plugin for WordPress –…6.1
• CVE-2023-6830The Formidable Forms plugin for WordPress is vulnerable to H…6.1
• CVE-2023-6831Path Traversal: '\..\filename' in GitHub repository mlflow/m…8.1
• CVE-2023-6832Business Logic Errors in GitHub repository microweber/microw…4.3
• CVE-2023-6833Insertion of Sensitive Information into Log File vulnerabili…4.4
• CVE-2023-6835Multiple WSO2 products have been identified as vulnerable du…5.3