Cross-site Scripting Vulnerability in WP Rentals by WpEstate

CVE-2025-53330

What is CVE-2025-53330?

A security vulnerability has been identified in the WP Rentals theme by WpEstate, specifically a Stored Cross-site Scripting (XSS) flaw. This issue allows attackers to inject malicious scripts that could be executed in the browsers of users who visit affected pages. Such an exploit can lead to data theft, session hijacking, and further compromise of site security. The vulnerability impacts various versions of WP Rentals prior to 3.13.1, necessitating immediate attention and update to safeguard user data and maintain the integrity of hosted websites.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References