WordSec
WordSec

Real Estate 7 WordPress

Explore Real Estate 7 WordPress vulnerabilities across all versions. Currently tracking 15 known vulnerabilities, including severity, impact, and patch status.

01234567891020.07.2019Today20.07.20196.4Real Estate 7 WordPress Theme < 2.9.1 - Stored Cross-Site Scripting CVSS 6.4 · 20.07.201914.01.20206.4Real Estate 7 WordPress < 2.9.5 - Multiple Vulnerabilities CVSS 6.4 · 14.01.202023.07.20206.1Real Estate 7 <= 3.0.3 - Reflected Cross-Site Scripting CVSS 6.1 · 23.07.202029.08.20206.1Real Estate 7 WordPress < 3.0.6 - Reflected Cross-Site Scripting CVSS 6.1 · 29.08.202010.06.20216.1WP Pro Real Estate 7 < 3.1.1 - Reflected Cross-Site Scripting CVSS 6.1 · 10.06.202120.02.20237.2Real Estate 7 Theme <= 3.3.1 - Stored Cross-Site Scripting CVSS 7.2 · 20.02.202328.02.20236.1Real Estate 7 <= 3.3.4 - Reflected Cross-Site Scripting via ct_additional_features CVSS 6.1 · 28.02.202301.03.20235.4Real Estate 7 <= 3.3.4 - Cross-Site Request Forgery CVSS 5.4 · 01.03.202309.03.20235.8Real Estate 7 Theme <= 3.3.4 - Unauthenticated Arbitrary Email Sending CVSS 5.8 · 09.03.202311.02.20259.8Real Estate 7 WordPress <= 3.5.1 - Unauthenticated Privilege Escalation to Administrator CVSS 9.8 · 11.02.202531.03.20258.8WP Pro Real Estate 7 <= 3.5.4 - Authenticated (Custom) Arbitrary File Upload CVSS 8.8 · 31.03.202517.04.20259.8Real Estate 7 <= 3.5.2 - Unauthenticated Privilege Escalation CVSS 9.8 · 17.04.202517.06.20267.5Real Estate 7 WordPress <= 3.5.9 - Unauthenticated SQL Injection CVSS 7.5 · 17.06.202626.06.20264.3Real Estate 7 WordPress <= 3.5.9 - Cross-Site Request Forgery CVSS 4.3 · 26.06.202629.06.20267.2Real Estate 7 WordPress <= 3.5.9 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 29.06.2026

Strategic Overview

Avg CVSSMedium
6.9/ 10
Patch Coverage100%
Open

0

Fixed

15

Get automatic notifications for all Real Estate 7 WordPress vulnerabilities before they are exploited.

Vulnerability Records

15 records
2026-06-29 00:00
Real Estate 7 WordPress <= 3.5.9 - Unauthenticated Stored Cross-Site Scripting
Real Estate 7 WordPress
<= 3.5.9
CVE-2026-57343
7.2
High
João Pedro S Alcântara (Kinorth)Yes
2026-06-26 00:00
Real Estate 7 WordPress <= 3.5.9 - Cross-Site Request Forgery
Real Estate 7 WordPress
<= 3.5.9
CVE-2026-57641
4.3
Medium
João Pedro S Alcântara (Kinorth)Yes
2026-06-17 00:00
Real Estate 7 WordPress <= 3.5.9 - Unauthenticated SQL Injection
Real Estate 7 WordPress
<= 3.5.9
CVE-2026-54827
7.5
High
João Pedro S Alcântara (Kinorth)Yes
2025-04-17 00:00
Real Estate 7 <= 3.5.2 - Unauthenticated Privilege Escalation
Real Estate 7 WordPress
<= 3.5.2
CVE-2025-39459
9.8
Critical
Ananda DhakalYes
2025-03-31 19:22
WP Pro Real Estate 7 <= 3.5.4 - Authenticated (Custom) Arbitrary File Upload
Real Estate 7 WordPress
<= 3.5.4
CVE-2025-2891
8.8
High
FoxyyyYes
2025-02-11 00:00
Real Estate 7 WordPress <= 3.5.1 - Unauthenticated Privilege Escalation to Administrator
Real Estate 7 WordPress
<= 3.5.1
CVE-2024-13421
9.8
Critical
Lucio SáYes
2023-03-09 00:00
Real Estate 7 Theme <= 3.3.4 - Unauthenticated Arbitrary Email Sending
Real Estate 7 WordPress
<= 3.3.4
N/A
5.8
Medium
R3N0Yes
2023-03-01 00:00
Real Estate 7 <= 3.3.4 - Cross-Site Request Forgery
Real Estate 7 WordPress
<= 3.3.4
N/A
5.4
Medium
R3N0Yes
2023-02-28 00:00
Real Estate 7 <= 3.3.4 - Reflected Cross-Site Scripting via ct_additional_features
Real Estate 7 WordPress
<= 3.3.4
N/A
6.1
Medium
R3N0Yes
2023-02-20 00:00
Real Estate 7 Theme <= 3.3.1 - Stored Cross-Site Scripting
Real Estate 7 WordPress
<= 3.3.1
CVE-2022-47146
7.2
High
R3N0Yes
Showing 1–10 of 15 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C