The Opal Estate plugin for WordPress is vulnerable to changes in important features in versions up to, and including, 1.6.11. This means that people without permission can modify featured properties. This could have a serious impact on the safety and security of the WordPress website.