CVE-2026-104913 | esaia Interactive Real Estate Plugin up to 2.6.0 on WordPress extract_zip_data unrestricted upload (EUVD-2026-118566)

A vulnerability described as critical has been identified in esaia Interactive Real Estate Plugin up to 2.6.0 on WordPress. This affects the function extract_zip_data. The manipulation results in unrestricted upload.

This vulnerability is reported as CVE-2026-104913. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More