Estatik Real Estate Plugin
Estatik Real Estate Plugin has 10 disclosed vulnerabilities in the WordSec catalog, reported between 2016 and 2026; 8 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 3 high. 2026 was the busiest year with 3 disclosures.
The most common weakness is Cross-Site Scripting, behind 3 of the records (30%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization.
8 of the records (80%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2025.
6 independent researchers contributed these findings, most of them (2) reported by Erwan LR. Estatik Real Estate Plugin is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2026-81775Estatik Real Estate Plugin <= 4.3.4 - Unauthenticated Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Estatik Real Estate Plugin
Author
Estatik
User-friendly intuitive interface. Clean design. Flexible functionality. The full-featured WordPress real estate plugin with smooth integration with Elementor Page Builder. Visit www.estatik.net for more information. Visit demo of Estatik plugin built with Elementor Hello Theme. Main features: Quick Demo Setup Fields Builder (creates unlimited number of custom fields of any type – text, number, area, attachments, files, contact fields, etc.) Login via Facebook or Google Map Search built on AJAX Saved searches & wishlists Listing frontend management Sorting by price, date, popularity Customizable categories, types, statuses, features, amenities Customizable property labels (featured, hot, openhouse) Social sharing (Facebook, Twitter, LinkedIn) Share via email Photo gallery and video (YouTube, Vimeo) Multilingual (WPML, Polylang & Loco Translate support) Request info widget Customizable search widget Unlimited currencies 50+ shortcodes Elementor Page Builder & Hello Theme support PRO & Premium features: Agents & Agencies support (PRO) Agents & Agencies search (PRO) Private fields (for Admin, Agents only) (PRO) Front-end management for admin and users/agents (PRO) Subscription plans or One-time payments with payments via PayPal (PRO) CSV/XLS import via WP ALL Import (PRO) Compare feature PDF file generation (PRO) Saved searches updates notifications (PRO) Requests management in agent’s profile (PRO) Locations widget (PRO) Slider widget (PRO) Full-width Slideshow widget (PRO) Organic MLS import via RETS and RESO Web API (Premium) Estatik Native Themes: Estatik Realtor Theme – DEMO It also works with most of WordPress themes but if you have any issues, just drop us a message and we will add support of your theme for free. Documentation & shortcodes: Please visit this documentation page to get a full list of shortcodes. Full list of shortcodes can be found here Translated into: Italian Spanish French German Hungarian Dutch Romanian Polish
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C