WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Essential Real Estate

Completely plugins Real Estate. Management system which allows you to own and maintain a real estate marketplace, intro website.

16Reported vulnerabilities
9.8Highest CVSS score
5.3.3Latest version
7,000+Active installs

What to do now

Update Essential Real Estate to 5.2.1 or later. 12 of these have a fixed version available. Updating resolves them.

Plugin last updated: June 1, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2023-6140 High 8.8 1.1% Before 4.4.0 4.4.0 January 8, 2024
CVE-2023-6139 Medium 6.5 0.6% Before 4.4.0 4.4.0 January 8, 2024
CVE-2025-30849 Critical 9.8 0.8% 5.2.0 and earlier 5.2.1 March 27, 2025
CVE-2025-48126 Critical 9.8 0.5% 5.2.1 and earlier — May 21, 2025
CVE-2022-3933 Medium 5.4 0.9% Before 3.9.6 3.9.6 December 12, 2022
CVE-2023-6141 Medium 5.4 0.4% Before 4.4.0 4.4.0 January 8, 2024
CVE-2023-6827 High 8.8 1.3% 4.3.5 and earlier 4.4.0 December 15, 2023
CVE-2026-32465 High 7.5 0.3% 5.3.3 and earlier — August 14, 2026
WF-27205ad8-991f-4011-b1fd-759829acabd3 Medium 6.1 — 3.9.6 and earlier 4.0.0 December 5, 2022
WF-9c5a4705-1bad-4ea9-9102-dc2780a61ac7 Medium 6.1 — Before 1.7.2 1.7.2 June 29, 2019
CVE-2024-4273 Medium 5.4 0.3% Before 4.4.3 4.4.3 June 4, 2024
CVE-2025-66127 Medium 5.3 0.3% 5.2.2 and earlier — December 14, 2025
CVE-2025-68071 Medium 4.3 0.2% 5.2.2 and earlier — December 14, 2025
CVE-2025-24698 Medium 4.3 0.2% 5.1.8 and earlier 5.1.9 January 24, 2025
CVE-2024-12329 Medium 4.3 0.4% Before 5.1.7 5.1.7 December 12, 2024
CVE-2024-4274 Medium 4.3 0.5% Before 4.4.5 4.4.5 June 4, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.