CVE-2026-90964 | Essential Real Estate Plugin up to 5.3.4 on WordPress Email Action access control

November 5, 2026 Yanac

A vulnerability marked as critical has been reported in Essential Real Estate Plugin up to 5.3.4 on WordPress. This vulnerability affects unknown code of the component Email Action. Performing a manipulation results in improper access controls.

This vulnerability is cataloged as CVE-2026-90964. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More