Threat Database

Threat Entry Updated 2026-10-07

Wprentals - Security Vulnerability (CVE-2026-27434)

Missing Authorization vulnerability in sc Internet Vivoo WP Rentals wprentals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rentals: from n/a through 3.14.2.

THEME Wprentals

CVE-2026-27434

MEDIUM CVSS 5.3 2026-10-07

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-04

Wprentals - Broken Access Control (CVE-2026-27432)

Authorization Bypass Through User-Controlled Key vulnerability in sc Internet Vivoo WP Rentals allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Rentals: from n/a before 3.16.0.

THEME Wprentals

CVE-2026-27432

MEDIUM CVSS 5.4 2026-09-04

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Wprentals - Cross-Site Request Forgery (CSRF) (CVE-2025-64286)

Cross-Site Request Forgery (CSRF) vulnerability in WpEstate WP Rentals wprentals allows Cross Site Request Forgery.This issue affects WP Rentals: from n/a through

THEME Wprentals

CVE-2025-64286

MEDIUM CVSS 4.3 2025-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Wprentals - Cross-Site Scripting (XSS) (CVE-2025-53330)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WpEstate WP Rentals wprentals allows Stored XSS.This issue affects WP Rentals: from n/a through

THEME Wprentals

CVE-2025-53330

MEDIUM CVSS 6.5 2025-08-14

Risk Score

Open Full Technical Breakdown