Unrated severityNVD Advisory· Published Oct 20, 2026
CVE-2026-96902
CVE-2026-96902
Description
The Easy Property Listings WordPress plugin before 3.5.28 does not restrict which listing fields it adds to the public REST API output, allowing unauthenticated users to read details a site has chosen to hide on published listings, such as the asking price, sold price, street address and exact map coordinates.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <3.5.28
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.