CVE-2026-32465: WordPress Essential Real Estate plugin <= 5.3.3 - PHP Object Injection vulnerability
Published Aug 18, 2026
·Updated
Customer PHP Object Injection in Essential Real Estate <= 5.3.3 versions.
Affected Software
1 affected component
WordPress Essential Real Estate<=5.3.3
Event History
Aug 18, 2026
CVE Published
via MITRE·01:59 PM
Data Sourced
via MITRE·01:59 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The affected component is the Essential Real Estate plugin for WordPress through version 5.3.3. Exploitation is network-accessible and requires an authenticated account with low-level privileges; no user interaction is required.
2
What is the potential impact of successful exploitation?
The vulnerability can affect confidentiality, integrity, and availability, each with high impact according to the supplied CVSS vector. A successful attack could therefore expose, alter, or disrupt affected WordPress environments.