CVE-2026-96903

The Easy Property Listings WordPress plugin, in versions prior to 3.5.27 , is vulnerable to a sensitive data disclosure flaw. The root cause is a lack of authorisation checks on several contact-management read AJAX actions . This allows any authenticated user, including those with the lowest subs...