Unrated severityNVD Advisory· Published Nov 5, 2026
CVE-2026-90963
CVE-2026-90963
Description
The Essential Real Estate WordPress plugin before 5.3.5 does not perform any authorization or publication-status check in one of its AJAX actions, allowing unauthenticated users to read the full contents of property listings that have not been published, together with the private name, email address, phone number and office address of the listing agent.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <5.3.5
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.