Input validation vulnerability in Essential Real Estate 4.3.5

The Essential Real Estate plugin for WordPress has a security vulnerability that could allow a malicious user to gain access to the server the plugin is running on. This vulnerability affects versions of the plugin up to and including 4.3.5, and can be exploited by someone with a low level of access, such as a subscriber to the site. If exploited, the vulnerability would allow the malicious user to upload arbitrary files to the server, which could allow them to execute code remotely.