Domain For Sale – Landing Page Per Domain, Domain Mapping, Offers & Listings
Domain For Sale – Landing Page Per Domain, Domain Mapping, Offers & Listings has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Domain For Sale – Landing Page Per Domain, Domain Mapping, Offers & Listings has a vendor fix available, so running the current release closes it.
All of these findings were reported by Peter Thaleikis. Domain For Sale – Landing Page Per Domain, Domain Mapping, Offers & Listings is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2025-5239Domain For Sale <= 3.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via class_name Parameter
Read the full analysisVulnerability Records

Domain For Sale – Landing Page Per Domain, Domain Mapping, Offers & Listings
Author
ThemeAtelier
Domain For Sale is a WordPress plugin that lets you create professional domain for sale landing pages and sell unused domains directly from your website. Accept offers and inquiries, manage negotiations, and handle domain sales entirely from your WordPress dashboard—without relying on third-party marketplaces. With this plugin, you can showcase domains using customizable landing page templates and built-in offer forms. Every domain renders either the shared single page or its own template design, whichever you pick for it. Buyers can submit offers or inquiries directly, while you manage all submissions from a centralized offer management dashboard inside WordPress. Perfect for domain investors who want full control over offers, negotiations, and buyer communication in one place. Built-in domain mapping lets you point a real domain you own directly at one of your listings — visitors who type that domain see your listing with no redirect, the domain staying in their address bar the whole time. No separate WordPress install needed for every domain in your portfolio. Each offer includes detailed buyer information such as contact details, proposed amount, message, and submission context, helping you evaluate leads with confidence. Automatic email notifications keep both admins and buyers informed at every stage, with customizable templates for a professional sales experience. Use the plugin as a full domain sale theme replacement or embed listings anywhere using shortcodes. It works with any WordPress theme and supports Gutenberg, Elementor, and popular page builders. Fully responsive layouts ensure your sale pages look great on all devices. Designed for domain investors, agencies, and website owners, this tool offers a simple interface for beginners and flexible customization options for advanced users. Regular updates, multisite support, and clear documentation make it easy to manage multiple listings at scale. Turn your unused domains into opportunities with Domain For Sale — a flexible WordPress plugin to sell domains with landing pages, offers, and inquiries. 👁️Plugin Demo | 🚀Pro Version | 📖Documentation | 👩🏼💻Support | 🌟Rate this plugin Video demo Key Features: Domain Listing & Showcase – Showcase multiple domains using elegant layouts with powerful customization options. Landing Pages – Create professional landing pages for individual domains. Each domain chooses its own page — the standard single page, or the design of the template built for it — with a site-wide default for domains that have not chosen. These pages can also be used as single pages when domains are displayed in listings. Domain Mapping – Point a real domain you own directly at one of your listings. Visitors who type that domain see your listing with no redirect, the domain staying in their address bar the whole time — no separate WordPress install needed for every domain in your portfolio. Unlimited Templates – Create and manage unlimited sale templates using a dedicated custom post type. Bulk Import (CSV, XML, JSON) – Upload multiple domains at once and manage large portfolios easily. Flexible Display Options – Use the plugin as a full theme replacement or embed sale pages anywhere using shortcodes. Built-in Offer & Inquiry Form – Allow buyers to submit offers and inquiries directly from your sale pages. Centralized Offer Management Dashboard – View, search, filter, and manage all incoming submissions from one place inside WordPress. Detailed Offer & Buyer Information – Each offer includes buyer name, email, phone number, proposal message, domain name, date, and submission context. Automatic Admin Email Notifications – Receive instant email notifications when a new offer or inquiry is submitted. Bidder Confirmation Emails – Automatically send confirmation emails to buyers after they submit an offer. Customizable Email Templates – Customize admin and bidder email subjects and messages using dynamic tags such as {domain}, {name}, {email}, {phone}, {offer}, {proposal}, {date}, {siteTitle}, {currentURL}. Price Display Options – Display prices using dynamic placeholders like {price} or {{price}}. Currency Selection – Choose your preferred currency for displaying prices. Responsive & Mobile-Friendly Design – Sale pages automatically adapt to desktops, tablets, and mobile devices. Pre-Designed Layouts – Choose from ready-made layouts to quickly launch professional pages. Advanced Design Controls – Customize container width, column spacing, background images, overlays, and color schemes without coding. Typography Controls – Control fonts, sizes, colors, line height, and text styles for names, titles, content, and forms. Multiple Color Schemes – Select from predefined color schemes to match your brand instantly. Custom Contact Information Blocks – Add multiple contact details such as email addresses and phone numbers with icons. AJAX-Powered Forms – Fast, smooth form submissions without page reloads. Custom Success & Error Messages – Customize form success messages, error messages, and button labels. Custom CSS & JavaScript Panels – Add your own CSS or JavaScript directly from the plugin settings. SEO-Friendly Structure – Clean markup and lightweight output designed to work well with SEO plugins. Page Builder Compatibility – Works seamlessly with Gutenberg, Elementor, Classic Editor, WPBakery, Divi, Beaver Builder, Bricks, Oxygen, and more. Theme-Agnostic – Compatible with all WordPress themes including Astra, Blocksy, Kadence, Neve, OceanWP, Avada, and Divi. Multilingual & RTL Ready – Translation-ready and compatible with WPML, Polylang, Loco Translate, and RTL languages. Multisite Compatible – Fully functional in WordPress Multisite environments. Import & Export Domains (CSV, XML, JSON) – Easily upload and download domain data in bulk. Import & Export Listings (CSV, XML, JSON) – Transfer and manage listing data across websites. Settings Import & Export (JSON) – Backup and restore plugin settings quickly. No Coding Required – Beginner-friendly UI—install, activate, create a template, and start receiving offers. Developer-Friendly Architecture – Clean, extensible codebase suitable for customization and advanced use cases. Cross-Browser Compatibility – Works smoothly on Chrome, Firefox, Safari, Edge, and Opera. Comprehensive Documentation – Step-by-step guides and tutorials for easy setup and usage. Regular Updates & Active Support – Ongoing improvements, security updates, and responsive support. Other plugins by ThemeAtelier Darkify Dark Mode – Lightweight, customizable WordPress dark mode plugin for a sleek, accessible, and eye-friendly experience. WhatsApp Chat Help – A flexible WhatsApp chat plugin that helps website visitors start instant conversations with you directly from your site. Eventful – Events Showcase and Filter Bar – An event display plugin for The Events Calendar that helps you showcase events in clean, modern, responsive layouts. Greet – Video Bubble Warm Welcome Plugin – A video welcome bubble plugin that helps you greet visitors warmly and provide quick contact options. Eventful for Elementor – An Elementor addon for The Events Calendar that lets you design and display events using Elementor widgets. Better Chat Support For Messenger – A Facebook Messenger chat plugin that allows visitors to contact you instantly through Messenger. External services This plugin connects to the following external services. Each service is described below, including what data is sent and when. ipwhois.app API We use the ipwhois.app API to detect visitor location to personalize the message and offer form on sale pages. Data sent: The visitor’s IP address. Data received: Public geolocation information based on IP, such as country, city, timezone, ISP/organization, and approximate latitude/longitude. When: On page load when a Domain For Sale page is displayed to a visitor. Service provider: ipwhois.app — Terms | Privacy Policy Example response includes publicly available location data like country and city — no personal account information is collected. Appsero SDK Domain For Sale uses the Appsero SDK to collect basic telemetry data, but only after the user explicitly opts in via an admin notice. Data sent: Basic site and plugin telemetry (only after user confirmation). When: Only after the user explicitly allows it via the admin notice. The SDK does not gather any data by default. Service provider: Appsero — Privacy Policy Integrating the Appsero SDK does NOT immediately start gathering data without user confirmation in any case.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C