Skip to contentMerv Barrett Easy Property Listings vulnerabilities
- merv barrett easy property listingsEasy Property Listings <= 3.5.28 - Authenticated (Contributor+) SQL Injection via 'post_type' Shortcode AttributeCVE-2026-1222276.5 Medium
- merv barrett easy property listingsWordPress Easy Property Listings plugin <= 3.5.25 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-61989Public exploit7.1 High
- merv barrett easy property listingsEasy Property Listings < 3.5.27 - Subscriber+ Sensitive Data Disclosure via Contact CRM AJAX HandlersCVE-2026-969034.3 Medium
- merv barrett easy property listingsEasy Property Listings < 3.5.28 - Unauthenticated Hidden Listing Details Disclosure via REST APICVE-2026-969025.3 Medium
- merv barrett easy property listingsEasy Property Listings <= 3.5.24 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'facebook' User Contact MethodCVE-2026-166846.4 Medium
- merv barrett easy property listingsWordPress Easy Property Listings plugin <= 3.5.20 - Broken Access Control vulnerabilityCVE-2025-680726.5 Medium
- merv barrett import into easy property listingsWordPress Import into Easy Property Listings plugin <= 2.2.1 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-621124.3 Medium
- merv barrett easy property listingsWordPress Easy Property Listings plugin <= 3.5.22 - Broken Access Control vulnerabilityCVE-2025-642424.3 Medium
- merv barrett easy property listingsEasy Property Listings <= 3.5.3 - Admin+ Stored XSSCVE-2024-28694.8 Medium
- easy property listings property listings, merv barrett easy property listings +1 moreEasy Property Listings < 3.5.4 - Arbitrary Contact Deletion via CSRFCVE-2024-31634.3 Medium
- merv barrett easy property listingsWordPress Easy Property Listings plugin <= 3.5.3 - Broken Access Control vulnerabilityCVE-2024-327995.3 Medium
- merv barrett easy property listingsEasy Property Listings <= 3.5.2 - Authenticated(Contributor+) SQL Injection via ShortcodeCVE-2024-18938.8 High
- merv barrett easy property listingsCross-site request forgery (CSRF) vulnerability in Easy Property Listings versions prior to 3.4...CVE-2020-55308.8 High