Interactive Real Estate – Floor Plan & Building Visualizer
Interactive Real Estate – Floor Plan & Building Visualizer has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of November 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Unrestricted Upload Of File With Dangerous Type, behind 1 of the records (100%).
The one issue recorded for Interactive Real Estate – Floor Plan & Building Visualizer has a vendor fix available, so running the current release closes it.
All of these findings were reported by Darren Carreras. Interactive Real Estate – Floor Plan & Building Visualizer is installed on roughly 30 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.4.
CVE-2026-104913Interactive Real Estate <= 2.6.0- Authenticated (Subscriber+) Arbitrary File Upload via Project Import ZIP with Crafted image_map.json
Read the full analysisVulnerability Records

Interactive Real Estate – Floor Plan & Building Visualizer
Author
Esaia
Upgrade To Pro! | Live Demo | Module Demo | Support Interactive Floor Plan & Building Visualizer for WordPress Interactive Real Estate is a WordPress plugin built for real estate developers, construction companies, and property agencies that need to present new developments online. Turn your building renders and floor plan images into a fully interactive property search experience — buyers click on a unit, see its details, and request a callback, all without leaving the page. No coding required. Works with any WordPress theme. Why Construction Companies Choose This Plugin Static images and PDF floor plans lose leads. Buyers expect to explore a development the way they explore a map — click a floor, click a unit, see what’s available. Interactive Real Estate gives your WordPress site that experience in hours, not weeks. Convert more leads — buyers engage longer when they can explore units interactively Show real-time availability — mark units as available, reserved, or sold with custom statuses Present pricing clearly — display price, area, room count, and custom fields per unit Works for any property type — apartment buildings, residential complexes, cottage communities, commercial developments, multi-block projects Draw Clickable Areas on Any Building Image Upload your building render or floor plan, then draw clickable SVG polygons directly on the image. Each area links to a unit (flat, apartment, office) with its own details page or modal popup. Zoom in while drawing for pixel-precise selections, then pan around with the spacebar. Interactive Floor Plan Navigation Buyers can click a building to select a floor, then click a floor to browse individual apartments. Each click reveals unit details: size, price, availability status, room count, and any custom fields you define. No page reloads — everything happens inline. Apartment & Property Listing Features Filterable apartment list with price range, area, floor, room count, and status filters Table view with sortable columns for a spreadsheet-style browsing experience Custom statuses — available, sold, reserved, or any label you define Custom fields — add any data point relevant to your development (view, orientation, parking, etc.) Flat types — define a layout once and reuse it across dozens of identical units Shareable unit links — let buyers save and share a specific apartment Lead Generation Built In Buyers can submit a callback request directly from the unit modal. You receive responses by email and can read them in the WordPress dashboard. No third-party form plugin needed. 360° Building Viewer (Add-On) The 360° Building Add-On lets you present a building as a spinning, rotatable image sequence — the same experience buyers see on car-configurator sites. Overlay clickable SVG polygons on the 360° view so buyers can click on any unit from any angle and see its details instantly. Use the [irep_360] shortcode to embed it on any page. Ideal for showcasing exterior facades, rooftop views, or any development where showing the full building from all angles improves the buying experience. Drag or auto-spin through a full 360° image sequence Clickable SVG areas on the rotating image Unit details open in a modal — same as the standard floor plan viewer Works alongside [irep_project] and [irep_flats] on the same page Shortcodes — Place Anywhere on Your Site Use shortcodes to embed the building viewer, floor plan, or apartment list on any page, post, or landing page: [irep_project] — interactive building and floor plan viewer [irep_flats] — filterable apartment list with table view [irep_360] — 360° spinning building viewer (add-on) Also available as Gutenberg blocks for block-editor users. Project Export / Import Duplicate or migrate full projects — buildings, floors, flats, types, and all settings — in a single export file. Why it helps: – Save time: Copy projects without rebuilding them by hand – Keep backups: Store your project settings safely Key Features Draw SVG polygon areas on building renders and floor plan images Zoom and pan while editing for precise polygon placement Real-time preview of changes in the admin Organize projects by blocks, floors, and flats Custom statuses: available, sold, reserved, and more Callback request form with email notifications Embed anywhere with shortcodes or Gutenberg blocks Open a detail page or modal popup when a unit is clicked Export and import full projects ⭐ Premium Features Create unlimited projects (1 in the free version) Create unlimited flats (25 in the free version) Run a script when a path is clicked Customize SVG path colors per status and unit Project export and import Custom currency symbol 24/7 premium support Access to updates ⭐ Gold Features Everything in Premium Lead capture form — buyers fill out a callback request from the unit modal View and manage form responses in the dashboard Shareable unit links — buyers can bookmark or share individual apartments Filterable apartment list shortcode with price, area, floor, and status filters Custom Flat Field Builder — add any data field to your units Custom Table Field Builder — configure which columns appear in the list view Custom statuses — sold, reserved, or any label your sales team uses Who Uses Interactive Real Estate? Real estate developers launching new residential or commercial projects Construction companies showcasing apartments, townhouses, or cottage communities Property agencies presenting off-plan developments to buyers Architects and project marketers building sales microsites for new developments Replace your static floor plan PDF with an interactive experience that keeps buyers on your site and sends you qualified leads. Upgrade to Interactive Real Estate Premium to unlock unlimited projects, lead capture, and the full apartment list shortcode. Live Demos and Documentation Live Demo: See the plugin in action on a real development Admin Module Demo: Try drawing areas on a building image Video Tutorial: Full setup walkthrough Documentation: Complete guide and FAQ Video Tutorial If you want a simple step-by-step guide, watch the video tutorial here: Watch the Video Tutorial Source Code The unminified JavaScript and CSS source code is available here: link Build Instructions To rebuild the minified JavaScript files: Clone or download the repository. Run npm install to install dependencies. Run npm run build to generate the minified files. The minified files will be located in dist/assets/index.js. Plugin Support For support, visit https://www.ireplugin.com/contact. You can also email interactiverealestateplugin@gmail.com. License Interactive Real Estate is licensed under GPL2. For more details, see the GPL2 License.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C