contempoinc

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

contempoinc records in CISA KEV

No contempoinc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Real Estate 7 3 records MEDIUM

Records

3 records in Real Estate 7 · all components

TI-2024-12462 CVE-2024-13421 · GHSA-5f8c-x4ph-c49p

Real Estate 7 WordPress <= 3.5.1 - Unauthenticated Privilege Escalation to Administrator

MEDIUM 50

The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00775 Published 2025-02-12 No fix listed CWE-266

TI-2021-06679 CVE-2021-24387 · GHSA-4hqq-j7p9-x52j

Real Estate 7 < 3.1.1 - Reflected Cross-Site Scripting (XSS)

LOW 34

The WP Pro Real Estate 7 WordPress theme before 3.1.1 did not properly sanitise the ct_community parameter in its search listing page before outputting it back in it, leading to a reflected Cross-Site Scripting which can…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03677 Published 2021-07-06 Fixed in 3.1.1 CWE-79

TI-2022-23351 CVE-2022-47146 · GHSA-xrpr-pc4j-r3pr

WordPress Real Estate 7 Theme <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Contempoinc Real Estate 7 WordPress theme <= 3.3.1 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-03-27 No fix listed CWE-79

Open these records in search →

Critical	2
High	4
Medium	3
Low	0
No CVSS	0