RealPress – Real Estate Plugin

RealPress – Real Estate Plugin has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Missing Authorization, SQL Injection.

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

3 independent researchers contributed these findings, one record each. RealPress – Real Estate Plugin is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

5.7/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all RealPress – Real Estate Plugin vulnerabilities before they are exploited.

Most severe open issueCVSS 7.5CVE-2026-66458

RealPress – Real Estate Plugin <= 1.1.2 - Unauthenticated SQL Injection

Read the full analysis

Vulnerability Records

3 records


2026-08-07 00:00	RealPress – Real Estate Plugin <= 1.1.2 - Unauthenticated SQL Injection RealPress <= 1.1.2	`CVE-2026-66458`	7.5 High	Mukhlis Amien	No
2026-01-13 00:00	RealPress – Real Estate Plugin <= 1.1.0 - Cross-Site Request Forgery RealPress <= 1.1.0	`CVE-2026-27050`	4.3 Medium	hhhai	Yes
2025-10-10 00:00	RealPress <= 1.0.9 - Missing Authorization to Unauthenticated Page Creation and Email Sending RealPress <= 1.0.9	`CVE-2025-11191`	5.3 Medium	Khaled Alenazi (Nxploited)	Yes

Showing 1–3 of 3 reports

Latestv1.1.2

RealPress – Real Estate Plugin

Author

ThimPress

0.0(0)

0/100

Last Updated

2026-08-22 (22d ago)

Active Installs

400+

Downloads

13,157

Requires WP

6.0+

Requires PHP

7.4+

Tested up to

WP 7.1

Created

2022-08-25 (4y ago)

Build a Real Estate website is not an easy thing and that is why RealPress was born. Friendly interface, easy to use and has all necessary functions for you to build a Real Estate website in minutes. This plugin is designed for estate project, house, office, building, apartment, condominium, villa, luxury real estate… RealPress completely fits for real estate agents, real estate companies, real estate brokers, architects, construction companies, design companies, and more. Demo | Documentation | Support This plugin is designed for estate projects, house, office, building, apartment, condominium, villa, luxury real estate… RealPress completely fits for real estate agents, real estate companies, real estate brokers, architects, construction companies, design companies, and more. Highly recommended by RealPress users, we are excited to introduce you to our best Real Estate WordPress Themes, fully compatible with RealPress and designed to meet all your needs for building a professional real estate website. RealPress – Estate Sale and Rental WordPress Theme (Premium theme) RealPro – Estate Sale and Rental WordPress Theme (Free theme) Figma Design | RealPro – Free Download Awesome Products from ThimPress: #1 LMS WordPress Plugin | LearnPress #1 Education WordPress Theme | Eduma Minimal Multipurpose Shopify Theme | Storepify Features 1. Fully compatible with any version of WordPress. 2. List view and grid view. 3. Flexible to change URL’s slug, SEO friendly. 4. Advanced search. 5. Gallery, Video, 360 Virtual Tour. 6. Email notification. 7. Nearby places. 8. Agent management. 9. Become an agent. 10. Taxonomy management for property. 11. Compatible with OpenStreetMap. 12. Add custom fields for taxonomy. 13. Fully responsive. 14. Compatible with Contact Form 7. 15. Import property demo data. 16. Quick installation via WinRAR setup.

View on WordPress.org