CVE-2026-90966
Essential Real Estate < 5.3.5 - Customer+ Arbitrary Paid Package Activation and Forged Paid Invoice via ere_free_package_ajax
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Essential Real Estate WordPress plugin before 5.3.5 does not verify, in one of its AJAX actions, that a listing package selected for free activation is genuinely free or that the requesting user is entitled to it, allowing a self-registered customer to activate a paid package without payment and cause the site to record a paid invoice at the package's full price.
| Vendor | unknown |
| Product | essential real estate |
| Published | Nov 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown essential real estate
Be the first to know when new unknown vulnerabilities affecting unknown essential real estate are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Essential Real Estate
0 < 5.3.5
References
Credits
Artus KG WPScan