CVE-2026-25463

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WpEstate Wpresidence Core wpresidence-core allows Stored XSS.This issue affects Wpresidence Core: from n/a through = 5.4.0...

CVE-2026-25463

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WpEstate Wpresidence Core wpresidence-core allows Stored XSS.This issue affects Wpresidence Core: from n/a through = 5.4.0...

PT-2026-20751

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WpEstate Wpresidence Core wpresidence-core allows Stored XSS.This issue affects Wpresidence Core: from n/a through = 5.4.0...

CVE-2025-64199

Missing Authorization vulnerability in WpEstate wpresidence wpresidence allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpresidence: from n/a through = 5.3.2...

CVE-2025-64286

Cross-Site Request Forgery CSRF vulnerability in WpEstate WP Rentals wprentals allows Cross Site Request Forgery.This issue affects WP Rentals: from n/a through = 3.13.1...

CVE-2025-64199

Missing Authorization vulnerability in WpEstate wpresidence wpresidence allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpresidence: from n/a through = 5.3.2...

PT-2025-44244

Name of the Vulnerable Software and Affected Versions WpEstate wpresidence versions through 5.3.2 Description An authorization issue exists in WpEstate wpresidence, allowing exploitation of incorrectly configured access control security levels. Recommendations Update WpEstate wpresidence to a...

CVE-2025-64199: Missing Authorization

Missing Authorization vulnerability in WpEstate wpresidence wpresidence allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpresidence: from n/a through = 5.3.2...

CVE-2025-64286: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WpEstate WP Rentals wprentals allows Cross Site Request Forgery.This issue affects WP Rentals: from n/a through = 3.13.1...

EUVD-2025-24896

Malicious code in bioql PyPI...

CVE-2025-53330

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WpEstate WP Rentals wprentals allows Stored XSS.This issue affects WP Rentals: from n/a through = 3.16.1...

CVE-2025-53330

CVE-2025-53330 : WP Rentals WordPress theme (up to 3.13.1) has stored XSS due to improper input neutralization during web page generation. This can enable cross-site scripting within affected sites using the WP Rentals theme. Remediation: upgrade to a fixed version (Patchstack lists 3.16.1 as the...