contempoinc Vulnerabilities and Affected Products
Vulnerabilities associated with Real Estate 7.
Products
Clear product- Real Estate 74 vulnerabilities
- Real Estate 7 WordPress3 vulnerabilities
- Contempo Real Estate Core1 vulnerability
- WP Pro Real Estate 71 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-57343HIGH | WordPress Real Estate 7 theme <= 3.5.9 - Cross Site Scripting (XSS) vulnerabilityUnauthenticated Cross Site Scripting (XSS) in Real Estate 7 <= 3.5.9 versions. CWE-79Jul 2, 2026 | CVSS7.1v3.1 | EPSS0.186% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-57641MEDIUM | WordPress Real Estate 7 theme <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerabilityUnauthenticated Cross Site Request Forgery (CSRF) in Real Estate 7 <= 3.5.9 versions. CWE-352Jun 26, 2026 | CVSS6.5v3.1 | EPSS0.124% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-54827CRITICAL | WordPress Real Estate 7 theme <= 3.5.9 - SQL Injection vulnerabilityUnauthenticated SQL Injection in Real Estate 7 <= 3.5.9 versions. CWE-89Jun 26, 2026 | CVSS9.3v3.1 | EPSS0.283% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-39459HIGH | WordPress Real Estate 7 theme <= 3.5.2 - Privilege Escalation vulnerabilityIncorrect Privilege Assignment vulnerability in contempoinc Real Estate 7 realestate-7 allows Privilege Escalation.This issue affects Real Estate 7: from n/a through <= 3.5.2. CWE-266May 19, 2025 | CVSS7.3v3.1 | EPSS0.359% | PoCs3 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |