Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: Rameez Iqbal Clear all filters
TI-2026-70209 CVE-2026-96667 · GHSA-w98x-f92w-x8m7

Stored cross-site scripting in Real Estate Manager WordPress plugin

Priority LOW 31

The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'first_name' parameter in all versions up to, and including, 7.3 due to insufficie…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00291 Published 2026-10-10 No fix listed CWE-79
TI-2026-63207 CVE-2026-93908 · GHSA-jm7p-f6m7-xr3m

Real Estate Manager <= 7.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'before_price_text' Parameter

Priority LOW 28

The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before_price_text' parameter in all versions up to, and including, 7.3 due to ins…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00188 Published 2026-09-30 No fix listed CWE-79
TI-2025-36058 CVE-2025-58253 · GHSA-4qrc-7v22-7qwh

WordPress Real Estate Manager Plugin <= 7.3 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rameez Iqbal Real Estate Manager real-estate-manager allows DOM-Based XSS.This issue affects Real Estate Manager: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00215 Published 2025-09-22 No fix listed CWE-79
TI-2025-23733 CVE-2025-32668 · GHSA-89vf-799v-8hrp

WordPress Real Estate Manager plugin <= 7.3 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Rameez Iqbal Real Estate Manager real-estate-manager allows PHP Local File Inclusion.This issue aff…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0069 Published 2025-04-10 No fix listed CWE-98
TI-2025-23248 CVE-2025-32150 · GHSA-46gh-76jc-p9hf

WordPress Real Estate Manager plugin <= 7.3 - Local File Inclusion vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Rameez Iqbal Real Estate Manager real-estate-manager allows PHP Local File Inclusion.This issue aff…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01142 Published 2025-04-04 No fix listed CWE-98