3.4.31

DATE	CVE	VULNERABILITY TITLE	RISK
2024-09-12	CVE-2024-3163	Cross-Site Request Forgery (CSRF) vulnerability in Realestateconnected Easy Property Listings The Easy Property Listings WordPress plugin before 3.5.4 does not have CSRF check when deleting contacts in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack network low complexity realestateconnected CWE-352	4.3
2024-06-09	CVE-2024-32799	Unspecified vulnerability in Realestateconnected Easy Property Listings Missing Authorization vulnerability in Merv Barrett Easy Property Listings.This issue affects Easy Property Listings: from n/a through 3.5.3. network low complexity realestateconnected critical	9.8