Vulnerabilities

TI-2024-12462 CVE-2024-13421 · GHSA-5f8c-x4ph-c49p

Real Estate 7 WordPress <= 3.5.1 - Unauthenticated Privilege Escalation to Administrator

MEDIUM 50

The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00775 Published 2025-02-12 No fix listed CWE-266

TI-2022-23351 CVE-2022-47146 · GHSA-xrpr-pc4j-r3pr

WordPress Real Estate 7 Theme <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Contempoinc Real Estate 7 WordPress theme <= 3.3.1 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-03-27 No fix listed CWE-79

TI-2021-06679 CVE-2021-24387 · GHSA-4hqq-j7p9-x52j

Real Estate 7 < 3.1.1 - Reflected Cross-Site Scripting (XSS)

LOW 34

The WP Pro Real Estate 7 WordPress theme before 3.1.1 did not properly sanitise the ct_community parameter in its search listing page before outputting it back in it, leading to a reflected Cross-Site Scripting which can…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03677 Published 2021-07-06 Fixed in 3.1.1 CWE-79

Vulnerabilities

Filters

Real Estate 7 WordPress <= 3.5.1 - Unauthenticated Privilege Escalation to Administrator

WordPress Real Estate 7 Theme <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)

Real Estate 7 < 3.1.1 - Reflected Cross-Site Scripting (XSS)