Real Estate Directory
Real Estate Directory has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; all 2 are fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10. 2023 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Missing Authorization.
Every one of the 2 issues recorded for Real Estate Directory has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by Dave Jong. Real Estate Directory is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2023-28532Real Estate Directory <= 1.0.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation
Read the full analysisVulnerability Records

Real Estate Directory
Author
wpdirectorykit
nexpropertyReal Estate Directory Moison Listing Theme for Real Estate Agency, Booking, Realtor, Broker or larger Classified Ads Directory, but also possible to use with any other Classifieds Directory Business. Theme is mostly build for Elementor so everything can be customized visually. Real Estate Agency Directory Features: Manage Listings, Manage Categories, Manage Fields, Select listings agent, Manage indoor amenities, Manage outdoor amenities, Multimedia fields integration, Full Elementor compatibility, Messaging support, Demo data import for Real Estate and Car Dealership, Open street maps support. Check demo version on https://wpdirectorykit.com/theme_preview/moison
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C