| CVE-2026-90965 |
Essential Real Estate < 5.3.5 - Unauthenticated Unpublished Listing Image Disclosure
|
5.3
Medium
|
Nov 5, 2026 |
| CVE-2026-90966 |
Essential Real Estate < 5.3.5 - Customer+ Arbitrary Paid Package Activation and Forged Paid Invoice via ere_free_package_ajax
|
4.3
Medium
|
Nov 5, 2026 |
| CVE-2026-90967 |
Essential Real Estate < 5.3.5 - Customer+ Invoice PII Disclosure via IDOR
|
4.3
Medium
|
Nov 5, 2026 |
| CVE-2026-90963 |
Essential Real Estate < 5.3.5 - Unauthenticated Unpublished Property Listing and Agent Contact Disclosure via property_print_ajax
|
5.3
Medium
|
Nov 5, 2026 |
| CVE-2026-90964 |
Essential Real Estate < 5.3.5 - Unauthenticated Arbitrary Email Sending
|
5.3
Medium
|
Nov 5, 2026 |
| CVE-2026-110964 |
Essential Real Estate 4.4.3 - 5.3.4 - Subscriber+ Arbitrary Media Attachment Deletion via IDOR
|
6.5
Medium
|
Nov 4, 2026 |
| CVE-2023-6140 |
The Essential Real Estate WordPress plugin before 4.4.0 does not prevent users with limited privileges on the site, like…
|
8.8
High
|
Jan 8, 2024 |
| CVE-2023-6141 |
The Essential Real Estate WordPress plugin before 4.4.0 does not apply proper capability checks on its AJAX actions,…
|
5.4
Medium
|
Jan 8, 2024 |
| CVE-2023-6139 |
The Essential Real Estate WordPress plugin before 4.4.0 does not apply proper capability checks on its AJAX actions,…
|
6.5
Medium
|
Jan 8, 2024 |
| CVE-2022-3933 |
The Essential Real Estate WordPress plugin before 3.9.6 does not sanitize and escapes some parameters, which could allow…
|
5.4
Medium
|
Dec 12, 2022 |