WpEstate

Products

ProductCVEsExploitedLatest
WP Rentals2–Oct 29, 2025
wpresidence1–Oct 29, 2025
Wpresidence Core1–Feb 19, 2026

Exploited and recent CVEs

  • CVE-2026-25463 Medium 6.5 WordPress Wpresidence Core plugin <= 5.4.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-64286 Medium 4.3 WordPress WP Rentals theme <= 3.13.1 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-64199 Medium 5.3 WordPress wpresidence theme <= 5.3.2 - Broken Access Control vulnerability 0.2%
  • CVE-2025-53330 Medium 6.5 WordPress WP Rentals theme <= 3.16.1 - Cross Site Scripting (XSS) vulnerability 0.2%