Critical 9.3 Unfixed Closed
2025-08-05≤ 1.35.0
CVE-2012-10027
Minimum safe version
1.38.4
Update to 1.38.4 or later to address 7 fixable vulnerabilities
CVE-2012-10027
WP Property <= 1.38.3.2 - Non-administrative User XMLI Remote Information Disclosure
WP Property <= 1.35.0 - Arbitrary File Upload
WP Property <= 1.35.0 - Remote File Upload
WP-Property – WordPress Powered Real Estate and Property Management < 1.38.4 - Information Disclosure
WordPress WP Property Plugin - PHP File Upload
WordPress WP Property Plugin 1.35.0 - Arbitrary File Upload
WordPress WP Property Plugin <= 1.38.3.2 - Information Disclosure