FireStorm Professional Real Estate Plugin

FireStorm Professional Real Estate Plugin has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2012 and 2026; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 7.4, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.

The most common weakness is SQL Injection, behind 2 of the records (100%).

1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

2 independent researchers contributed these findings, one record each. FireStorm Professional Real Estate Plugin is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.7.41.

Strategic Overview

Avg CVSSHigh
7.4/ 10
Patch Coverage50%
Open

1

Fixed

1

Get automatic notifications for all FireStorm Professional Real Estate Plugin vulnerabilities before they are exploited.

Most severe open issueCVSS 4.9CVE-2026-22470

FireStorm Professional Real Estate <= 2.7.11 - Authenticated (Administrator+) SQL Injection

Read the full analysis

Vulnerability Records

2 records
FireStorm Professional Real Estate Plugin banner
Latestv2.7.11

FireStorm Professional Real Estate Plugin

FireStorm Plugins

Author

FireStorm Plugins

2.9(43)
58/100
Last Updated
2014-01-09 (13y ago)
Active Installs
10+
Downloads
44,084
Requires WP
3.6+
Requires PHP
0+
Tested up to
WP 3.7.41
Created
2011-09-08 (15y ago)

Please note, custom filters, listing sorting and comparing are now only available on the Professional Version available for purchase on our website. The FireStorm Real Estate Plugin is an advanced real estate plugin allowing you to turn your WordPress website or blog into a fully functional real estate listing website. The plugin is ideal for Realtors, Agents, Brokers, For Sale By Owner listings and Real Estate Agencies looking to list properties. The administration is easy to use and loaded with features. The front end is great for SEO. It operates stand-alone which means it does not require blog posts for each property listing. This allows you to keep your blog separate from the real estate listings. Filters and short codes allow you to add single and multiple listings to any page or post. Related Links: Plugin Support Plugin Homepage Plugin Customization & Theme Development Features: “Point and Click” Management SEO Friendly Google Maps Integration Automatic Google Map Longtitude and Latitude Generation Search By Map Custom Input Fields Sellers Contact Details Seller Contact Form Lightbox Slideshow Support Custom Listing Labels Location Management Search Widget Location Widget Filters and Short Codes Horizontal and Vertical Listing Display Short Codes: Example: [fsrep-filter type=”city” map=”no” value=”2&#8243;] Types Available: “all” – show all listings “country” – display listings for a specific country – value is the country ID “state” – display listings for a specific state – value is the state ID “city” – display listings for a specific city – value is the city ID “single” – display a single listing “sold” – show sold listings – a limit can be set with the value “latest” – show latest listings – a limit can be set with the value “details” – display a specified listings details – value is the listing ID “map” can be set to “yes” or “no” to display the Google map. Requirements: Requirements WordPress Permalinks Enabled

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C