Property – Real Estate Directory Listing
Property – Real Estate Directory Listing has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Property – Real Estate Directory Listing has a vendor fix available, so running the current release closes it.
All of these findings were reported by kr0d. Property – Real Estate Directory Listing is installed on roughly 30 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2025-5117Property 1.0.5 - 1.0.6 - Missing Authorization to Authenticated (Author+) Privilege Escalation via property_package_user_role Metadata in PayPal Registration
Read the full analysisVulnerability Records
Property – Real Estate Directory Listing
Author
themeglow
Property – Real Estate Directory Listing is the ultimate WordPress plugin for managing property listings, real estate directories, and classified ads. Whether you’re building a business directory, a real estate marketplace, or a local classifieds site, this plugin offers all the essential tools for a seamless experience. 🚀 Why Choose Property – Real Estate Directory Listing? – SEO Optimized: Structured data, schema markup, and fast performance enhance search engine rankings. – Mobile-Friendly & Responsive: Works perfectly on all devices. – Customizable & Flexible: Add custom fields, categories, and filters effortlessly. – Easy Monetization: Charge users for premium listings with WooCommerce integration. – Fast & Lightweight: Optimized code ensures high performance. 🎯 Key Features: ✔ Advanced Search & Filters – Helps users find properties quickly. ✔ Frontend Submission – Users can submit and manage listings directly from the frontend. ✔ Google Maps & OpenStreetMap Integration – Display property locations dynamically. ✔ CSV Import & Export – Easily bulk upload or download listings. ✔ Ratings & Reviews – Allow users to review and rate properties. ✔ Shortcodes & Widgets – Display listings anywhere on your site. ✔ Multilingual Ready – Fully compatible with WPML, Loco Translate, and Polylang. ✔ Custom Fields & Taxonomies – Adapt the plugin to your needs. ✔ WooCommerce Payment Integration – Charge for premium listings. ✔ Image Gallery & Video Support – Showcase listings with high-quality images and videos. ✔ AJAX-powered Listings – Fast, dynamic updates without page reloads. 🔗 Live Demo | Documentation | Support External Services This plugin integrates with third-party services to provide enhanced functionality: Google Maps API – Displays interactive maps. Privacy Policy OpenStreetMap API – Free alternative to Google Maps. Privacy Policy LocationIQ API – Geolocation and address lookup. Privacy Policy YouTube & Vimeo – Embed property listing videos. YouTube | Vimeo Fancybox & Colorbox – Lightbox image effects. Support & Feedback Need help? Visit our Support Page or explore our Documentation. We appreciate your feedback! If you enjoy using this plugin, please leave us a review on WordPress.org. ⭐⭐⭐⭐⭐
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C