What’s Vulnerable › Products

Easy Property Listings vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your Easy Property Listings version is affected

Latest Easy Property Listings vulnerabilities

• CVE-2026-61989 — WordPress Easy Property Listings plugin <= 3.5.25 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-96903 — Easy Property Listings < 3.5.27 - Subscriber+ Sensitive Data Disclosure via Contact CRM AJAX Handlers (CVSS 4.3)
• CVE-2026-96902 — Easy Property Listings < 3.5.28 - Unauthenticated Hidden Listing Details Disclosure via REST API (CVSS 5.3)
• CVE-2026-16684 — Easy Property Listings <= 3.5.24 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'facebook' User Contact Method (CVSS 6.4)
• CVE-2025-68072 — WordPress Easy Property Listings plugin <= 3.5.20 - Broken Access Control vulnerability (CVSS 6.5)
• CVE-2025-64242 — WordPress Easy Property Listings plugin <= 3.5.22 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2024-2869 — Easy Property Listings <= 3.5.3 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2024-3163 — Easy Property Listings < 3.5.4 - Arbitrary Contact Deletion via CSRF (CVSS 4.3)
• CVE-2024-32799 — WordPress Easy Property Listings plugin <= 3.5.3 - Broken Access Control vulnerability (CVSS 9.8)
• CVE-2024-1893 — Easy Property Listings <= 3.5.2 - Authenticated(Contributor+) SQL Injection via Shortcode (CVSS 8.8)
• CVE-2020-5530 — (CVSS 8.8)
• CVE-2019-15817 — (CVSS 6.1)