Advisories · Technology

Essential Real Estate.

Every CVE that names Essential Real Estate among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-90967 CVE record

Essential Real Estate < 5.3.5 - Customer+ Invoice PII Disclosure via IDOR
- Essential Real Estate
Not analysed yet 5 Nov 2026
CVE-2026-90966 CVE record

Essential Real Estate < 5.3.5 - Customer+ Arbitrary Paid Package Activation and Forged Paid Invoice via ere_free_package_ajax
- Essential Real Estate
Not analysed yet 5 Nov 2026
CVE-2026-90965 CVE record

Essential Real Estate < 5.3.5 - Unauthenticated Unpublished Listing Image Disclosure
- Essential Real Estate
Not analysed yet 5 Nov 2026
CVE-2026-90964 CVE record

Essential Real Estate < 5.3.5 - Unauthenticated Arbitrary Email Sending
- Essential Real Estate
Not analysed yet 5 Nov 2026
CVE-2026-90963 CVE record

Essential Real Estate < 5.3.5 - Unauthenticated Unpublished Property Listing and Agent Contact Disclosure via property_print_ajax
- Essential Real Estate
Not analysed yet 5 Nov 2026
CVE-2026-110964 CVE record

CVSS 6.5 Medium

Essential Real Estate 4.4.3 - 5.3.4 - Subscriber+ Arbitrary Media Attachment Deletion via IDOR
- Essential Real Estate
- Broken access control
Not analysed yet 4 Nov 2026
CVE-2023-6140 CVE record

CVSS 8.8 High

Essential Real Estate < 4.4 - Subscriber+ Arbitrary File Upload
- Essential Real Estate
Not analysed yet 8 Jan 2024
CVE-2023-6141 CVE record

CVSS 5.4 Medium

Essential Real Estate < 4.4.0 - Subscriber+ Stored XSS
- Essential Real Estate
Not analysed yet 8 Jan 2024
CVE-2023-6139 CVE record

CVSS 6.5 Medium

Essential Real Estate < 4.4.0 - Subscriber+ Denial of Service via Arbitrary Option Update
- Essential Real Estate
Not analysed yet 8 Jan 2024
CVE-2022-3933 CVE record

CVSS 5.4 Medium

Essential Real Estate < 3.9.6 - Reflected Cross-Site-Scripting
- Essential Real Estate
Not analysed yet 12 Dec 2022