Essential Real Estate
Essential Real Estate has 15 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2026; 11 are fixed and 4 remain unpatched as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 2 high. 2025 was the busiest year with 5 disclosures.
The most common weakness is Cross-Site Scripting, behind 5 of the records (33%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Missing Authorization.
11 of the records (73%) have a vendor fix, while 4 remain unpatched. The oldest unresolved one dates back to 2025.
9 independent researchers contributed these findings, most of them (3) reported by Krzysztof Zając. Essential Real Estate is installed on roughly 7,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2025-48126Essential Real Estate <= 5.2.1 - Unauthenticated Local File Inclusion
Read the full analysisVulnerability Records
Essential Real Estate
Author
g5theme
Main Site | Docs | Add-ons | Premium Theme There are full features needed for a real estate website, easy to customize and overwrite templates. Allow to manage property listings and submit property via back-end and front-end. Supported global payment, build market, agent management,…etc. FREE plugins but already all PREMIUM FEATURES. Demo with premium theme Click Create Demo to create temporary website. You can View demo or buy Homeid WP theme. You can View demo or buy Beyot WP theme. You can View demo or buy Benaa WP theme. Sample Data Demo Download xml file: sample-data.xml Download zip file: sample-data.zip Add-ons ERE Download – Addons Free ERE Colors – Addons Free ERE Recently Viewed – Addons Free ERE Similar Properties – Addons Free Video how to Features Already define pages for Real Estate website like: Search Page, Listing Properties, Listing Agent, Agency, Payment, Profile,… Submit property via Back-End and Front-End Manage property listings via Back-End and Front-End Can add custom fields for property Easy to customize Flexible Search Favorite Properties Saved Searches Properties Compare Properties Print Properties Nearby Place Membership Packages Management invoices, User Profiles,… Listing Expiration Date Paid Submission Type: Free, Pay per Package, Pay per Listing Payment Method: Paypal, Stripe, Wire Transfer Email Listing Alerts Featured Listings Related Listing Google Suggestions, Geo Location Search, Map Directions Supported Google Captcha Social Login, Social Share Multiple Listing Layouts Fully Responsive Gallery, Video, 360 Virtual Tour, … Contact Agent Private Note Compatible With Visual Composer plugin Compatible With WPML plugin
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C