Read the docs

WpEstate

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

WpEstate records in CISA KEV

No WpEstate vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2025-39642 CVE-2025-64199 · GHSA-h3r4-4xxq-ggf2

WordPress wpresidence theme <= 5.3.2 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in WpEstate wpresidence wpresidence allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpresidence: from n/a through <= 5.3.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00218 Published 2025-10-29 No fix listed CWE-862
TI-2026-20575 CVE-2026-25463 · GHSA-9qc3-jghc-hw87

WordPress Wpresidence Core plugin <= 5.4.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WpEstate Wpresidence Core wpresidence-core allows Stored XSS.This issue affects Wpresidence Core: from n/a through <=…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00155 Published 2026-02-19 No fix listed CWE-79
TI-2025-33297 CVE-2025-53330 · GHSA-p6jr-3hh3-xcgr

WordPress WP Rentals theme <= 3.16.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WpEstate WP Rentals wprentals allows Stored XSS.This issue affects WP Rentals: from n/a through <= 3.16.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00235 Published 2025-08-14 No fix listed CWE-79
Open these records in search →