{"affected":[{"defaultStatus":"unaffected","product":"Essential Real Estate","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"5.3.6","status":"affected","version":"5.3.5","versionType":"semver"}]}],"cveId":"CVE-2026-123670","cwes":["CWE-284"],"description":"The Essential Real Estate WordPress plugin before 5.3.6 does not verify that the recipients it allows for its contact email action are legitimate, allowing users with the self-registered Customer role to add any address to that allowlist so that unauthenticated users can then send emails with attacker-controlled content to it through the site.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/04d772fe-001d-4f25-a11a-dedf16064ce4/"}],"kev":null,"metrics":[],"modifiedAt":1794549608415,"publishedAt":1794549608415,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/04d772fe-001d-4f25-a11a-dedf16064ce4/"}],"remediation":[],"revision":"4e7672c83507248882fb9686e3a24643aceaf667e9509361cb28f3276c05165b","sources":[{"modifiedAt":1794549608415,"name":"CNA: WPScan","retrievedAt":1794550147923,"url":"https://www.cve.org/CVERecord?id=CVE-2026-123670"}],"ssvc":null,"status":"published","title":"Essential Real Estate 5.3.5 - Customer+ Email Relay Allowlist Poisoning","updatedAt":1794550147923}