Skip to content
Noroxi

Easy Property Listings

easy-property-listings · plugin

Known security vulnerabilities for Easy Property Listings. Find out in seconds which version runs on your site with WP Lens.

7 known vulnerabilities

1 critical · latest Aug 1, 2026

Vulnerabilities

  • CVE-2024-32799

    WordPress Easy Property Listings plugin <= 3.5.3 - Broken Access Control vulnerability

    Critical 9.8

  • CVE-2024-1893

    Easy Property Listings <= 3.5.2 - Authenticated(Contributor+) SQL Injection via Shortcode

    High 8.8

  • CVE-2020-5530

    Cross-site request forgery (CSRF) vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authen

    High 8.8

  • CVE-2025-68072

    WordPress Easy Property Listings plugin <= 3.5.20 - Broken Access Control vulnerability

    Medium 6.5

  • CVE-2026-16684

    Easy Property Listings <= 3.5.24 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'facebook' User Contact Method

    Medium 6.4

  • CVE-2019-15817

    The easy-property-listings plugin before 3.4 for WordPress has XSS.

    Medium 6.1

  • CVE-2025-64242

    WordPress Easy Property Listings plugin <= 3.5.22 - Broken Access Control vulnerability

    Medium 4.3

← Back to directory