Threats tagged 'ghsa-rvw5-rgwc-mcpp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	–	CVE-2026-90965The Essential Real Estate WordPress plugin before 5.3.5 does not perform a publication-status or authorization check Medium2026-11-05GCVE DatabaseCVE-2026-90965 The Essential Real Estate WordPress plugin versions prior to 5.3.5 have a vulnerability where two AJAX actions do not perform publication-status or authorization checks. This flaw allows unauthenticated users to access images attached to unpublished property listings. Report on CVE-2026-90965 Vulnerability #ghsa-rvw5-rgwc-mcpp	GCVE Database	2026-11-05

Page 1 of 1