{"cve":"CVE-2026-90966","enrichment":{"created":"2026-11-05T07:45:14.432653+00:00","updated":"2026-11-05T07:45:14.432660+00:00","vendors":[],"weaknesses":["CWE-285"]},"mitre":{"cpes":[],"created":"2026-11-05T06:00:27.333000+00:00","description":"The Essential Real Estate WordPress plugin before 5.3.5 does not verify, in one of its AJAX actions, that a listing package selected for free activation is genuinely free or that the requesting user is entitled to it, allowing a self-registered customer to activate a paid package without payment and cause the site to record a paid invoice at the package's full price.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"mitre_repo_path":"cves/2026/90xxx/CVE-2026-90966.json","references":["https://wpscan.com/vulnerability/445a0351-d452-412e-8145-d427e10e0948/"],"title":"Essential Real Estate < 5.3.5 - Customer+ Arbitrary Paid Package Activation and Forged Paid Invoice via ere_free_package_ajax","updated":"2026-11-05T06:00:27.333000+00:00","vendors":[],"weaknesses":[]},"nvd":{"cpes":[],"created":"2026-11-05T06:17:10.087000+00:00","description":"The Essential Real Estate WordPress plugin before 5.3.5 does not verify, in one of its AJAX actions, that a listing package selected for free activation is genuinely free or that the requesting user is entitled to it, allowing a self-registered customer to activate a paid package without payment and cause the site to record a paid invoice at the package's full price.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"nvd_repo_path":"2026/CVE-2026-90966.json","references":["https://wpscan.com/vulnerability/445a0351-d452-412e-8145-d427e10e0948/"],"title":null,"updated":"2026-11-05T06:17:10.087000+00:00","vendors":[],"weaknesses":[]},"opencve":{"changes":[{"created":"2026-11-05T06:15:00+00:00","data":[{"details":{"new":"The Essential Real Estate WordPress plugin before 5.3.5 does not verify, in one of its AJAX actions, that a listing package selected for free activation is genuinely free or that the requesting user is entitled to it, allowing a self-registered customer to activate a paid package without payment and cause the site to record a paid invoice at the package's full price.","old":null},"type":"description"},{"details":{"new":"Essential Real Estate < 5.3.5 - Customer+ Arbitrary Paid Package Activation and Forged Paid Invoice via ere_free_package_ajax","old":null},"type":"title"},{"details":{"added":["https://wpscan.com/vulnerability/445a0351-d452-412e-8145-d427e10e0948/"],"removed":[]},"type":"references"}],"id":"bd1c042e-e50e-442a-8870-ccc2805f142c"},{"created":"2026-11-05T08:00:00+00:00","data":[{"details":{"added":["CWE-285"],"removed":[]},"type":"weaknesses"}],"id":"e80ab345-a732-46ef-8705-cc8c7d00eea2"}],"cpes":{"data":[],"providers":[]},"created":{"data":"2026-11-05T06:00:27.333000+00:00","provider":"mitre"},"description":{"data":"The Essential Real Estate WordPress plugin before 5.3.5 does not verify, in one of its AJAX actions, that a listing package selected for free activation is genuinely free or that the requesting user is entitled to it, allowing a self-registered customer to activate a paid package without payment and cause the site to record a paid invoice at the package's full price.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{},"provider":null},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{},"provider":null},"kev":{"data":{},"provider":null},"ssvc":{"data":{},"provider":null},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://wpscan.com/vulnerability/445a0351-d452-412e-8145-d427e10e0948/"],"providers":["mitre","nvd"]},"title":{"data":"Essential Real Estate < 5.3.5 - Customer+ Arbitrary Paid Package Activation and Forged Paid Invoice via ere_free_package_ajax","provider":"mitre"},"updated":{"data":"2026-11-05T07:45:14.432660+00:00","provider":"enrichment"},"vendors":{"data":[],"providers":[]},"weaknesses":{"data":["CWE-285"],"providers":["enrichment"]}}}