Vulnerabilities / Essential Real Estate

Essential Real Estate vulnerabilities

Advisories WPSec published for Essential Real Estate. Other sources may list more. Its attack surface: Essential Real Estate on WPSec AttackSurface.

Published	ID	Vulnerability	Severity	Fixed in
2026-10-31	WPSEC-2026-2166	Essential Real Estate <= 5.3.4 - Authenticated (Subscriber+) Payment Bypass via Free Package Activation	Medium 4.3	5.3.5
2026-10-31	WPSEC-2026-2165	Essential Real Estate <= 5.3.4 - Unauthenticated Information Exposure of Unpublished Properties via Print Property and Gallery	Medium 5.3	5.3.5
2026-10-31	WPSEC-2026-2164	Essential Real Estate <= 5.3.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Invoice Disclosure via Print Invoice	Medium 4.3	5.3.5
2026-10-31	WPSEC-2026-2163	Essential Real Estate <= 5.3.4 - Authenticated (Customer+) Insecure Direct Object Reference to Arbitrary Property Modification via Front-End Property Form	Medium 4.3	5.3.5
2026-10-31	WPSEC-2026-2162	Essential Real Estate <= 5.3.4 - Authenticated (Customer+) Arbitrary Attachment Deletion via Property Form	Medium 5.4	5.3.5
2026-10-31	WPSEC-2026-2161	Essential Real Estate <= 5.3.4 - Unauthenticated Arbitrary Email Sending via Contact Agent Form	Medium 5.3	5.3.5