The vulnerability is a missing authorization issue in the PropertyHive WordPress plugin. It allows attackers to access property content that should be restricted. The description does not mention that the flaw enables code execution, editing or deletion of listings. The weakness is classified as CWE‑862, a lack of proper authorization enforcement.

WordPress sites running PropertyHive plugin versions 2.1.12 or earlier are affected. The issue originates in the earliest releases and continues through all versions up to and including 2.1.12. Any site that has not upgraded beyond this threshold remains vulnerable.

The CVSS score of 4.3 indicates moderate impact. EPSS is less than 1%, meaning exploitation in the wild is unlikely at present. The vulnerability is not listed in CISA KEV. The likely attack vector is an attacker who can reach the property pages or administrative interface and can bypass the flawed access controls, possibly by possessing any user account or exploiting a site misconfiguration. No public exploits are documented, but the flaw persists until the plugin is upgraded or access controls are reviewed.