8.8
CVE-2026-32465
- EPSS 0.29%
- Veröffentlicht 18.08.2026 13:59:14
- Zuletzt bearbeitet 20.08.2026 12:49:04
- CVE-Watchlists
- Unerledigt
WordPress Essential Real Estate plugin <= 5.3.3 - PHP Object Injection vulnerability
Customer PHP Object Injection in Essential Real Estate <= 5.3.3 versions.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
Herstellerg5theme
≫
Produkt
Essential Real Estate
Default Statusunaffected
Version <=
5.3.3
Version
n/a
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.29% | 0.213 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| audit@patchstack.com | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-502 Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
https://patchstack.com/database/wordpress/plugin/essential-real-estate/vulnerability/wordpress-essential-real-estate-plugin-5-3-3-php-object-injection-vulnerability?_s_id=cve