Unrated severityNVD Advisory· Published Dec 12, 2024· Updated Apr 8, 2026
Essential Real Estate <= 5.1.6 - Missing Authorization to Authenticated (Contributor+) Information Exposure
CVE-2024-12329
Description
The Essential Real Estate plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on several pages/post types in all versions up to, and including, 5.1.6. This makes it possible for authenticated attackers, with Contributor-level access and above, to access invoices and transaction logs
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <=5.1.6
- g5theme/Essential Real Estatev5Range: 0
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.