PULSE
EN
FEED
ransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomeverstake reclama a ne*****h.comransomauditteam reclama a kx***om · CN · Technologyransompixelleaks reclama a Disclosed · Otherransomdark project reclama a Custom Bakehouse · US · Retail & E-Commerceransomdestello reclama a MAPFRE Brasil 2026 · BR · Financial Servicesransomthegentlemen reclama a MKG Kirchrode · DE · Manufacturingransomn0n reclama a Delta Dental of Missouri · US · Healthcareransomn0n reclama a The Container Store · US · Retail & E-Commerceransomlockbit5 reclama a centratamagroup.com · BR · Otherransommedusalocker reclama a Msn · US · Technologyransommedusalocker reclama a baiapai · Technologyransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomeverstake reclama a ne*****h.comransomauditteam reclama a kx***om · CN · Technologyransompixelleaks reclama a Disclosed · Otherransomdark project reclama a Custom Bakehouse · US · Retail & E-Commerceransomdestello reclama a MAPFRE Brasil 2026 · BR · Financial Servicesransomthegentlemen reclama a MKG Kirchrode · DE · Manufacturingransomn0n reclama a Delta Dental of Missouri · US · Healthcareransomn0n reclama a The Container Store · US · Retail & E-Commerceransomlockbit5 reclama a centratamagroup.com · BR · Otherransommedusalocker reclama a Msn · US · Technologyransommedusalocker reclama a baiapai · Technology
← Todos los CVEs
CVE Watch5 nov 2026

CVE-2026-90964

The Essential Real Estate WordPress plugin before 5.3.5 does not restrict the recipient of one of its contact email actions, allowing unauth

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

0

0-100

Publicado: 5 nov 2026 · Última mod.: 5 nov 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

The Essential Real Estate WordPress plugin before 5.3.5 does not restrict the recipient of one of its contact email actions, allowing unauthenticated users to send emails to arbitrary addresses with an attacker-controlled sender header and message body through the site.

Referencias oficiales
CVEs relacionados

Sin CVEs relacionados por CWE o producto.