Cross-site Scripting Vulnerability in WP Rentals by WpEstate

CVE-2025-53330

What is CVE-2025-53330?

A security vulnerability has been identified in the WP Rentals theme by WpEstate, specifically a Stored Cross-site Scripting (XSS) flaw. This issue allows attackers to inject malicious scripts that could be executed in the browsers of users who visit affected pages. Such an exploit can lead to data theft, session hijacking, and further compromise of site security. The vulnerability impacts various versions of WP Rentals prior to 3.13.1, necessitating immediate attention and update to safeguard user data and maintain the integrity of hosted websites.

References