Vulnerabilities / Easy Property Listings
Easy Property Listings vulnerabilities
Advisories WPSec published for Easy Property Listings. Other sources may list more. Its attack surface: Easy Property Listings on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-14 | WPSEC-2026-0878 | Easy Property Listings <= 3.5.26 - Authenticated (Subscriber+) Missing Authorization to Username Disclosure via epl_search_user AJAX Action | Medium 4.3 | 3.5.27 |
| 2026-10-13 | WPSEC-2026-0847 | Easy Property Listings <= 3.5.25 - Unauthenticated Reflected Cross-Site Scripting via 'epl_action' Parameter | Medium 6.1 | 3.5.26 |
| 2026-10-13 | WPSEC-2026-0846 | Easy Property Listings <= 3.5.25 - Authenticated (Contributor+) SQL Injection via 'property_status' Shortcode Attribute | Medium 6.5 | 3.5.26 |
License: CC BY 4.0