Wpestate

4 CVEs in 3 Wpestate products, including Wp Rentals, Wpresidence, Wpresidence Core. Newest: CVE-2026-25463 (2026-02-19).

Wpestate products with known CVEs

ProductCVEs
Wp Rentals2
Wpresidence1
Wpresidence Core1
Wpestate CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-25463Medium6.52026-02-19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WpEstate Wpresidence Core wpresidence-core allows Stored…
CVE-2025-64286Medium4.32025-10-29Cross-Site Request Forgery (CSRF) vulnerability in WpEstate WP Rentals wprentals allows Cross Site Request Forgery.This issue affects WP Rentals: from n/a thro…
CVE-2025-64199Medium5.32025-10-29Missing Authorization vulnerability in WpEstate wpresidence wpresidence allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe…
CVE-2025-53330Medium6.52025-08-14Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WpEstate WP Rentals wprentals allows Stored XSS.This issu…