Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-07-02
Real Estate 7 - Cross-Site Scripting (XSS) (CVE-2026-57343)
Unauthenticated Cross Site Scripting (XSS) in Real Estate 7
PLUGIN
Real Estate 7
CVE-2026-57343
Risk Score
Threat Entry
Updated 2026-06-26
Real Estate 7 - Cross-Site Request Forgery (CSRF) (CVE-2026-57641)
Unauthenticated Cross Site Request Forgery (CSRF) in Real Estate 7
PLUGIN
Real Estate 7
CVE-2026-57641
Risk Score
Threat Entry
Updated 2026-06-26
Real Estate 7 - SQL Injection (CVE-2026-54827)
Unauthenticated SQL Injection in Real Estate 7
PLUGIN
Real Estate 7
CVE-2026-54827
Risk Score
Threat Entry
Updated 2026-06-17
Real Estate 7 - Privilege Escalation (CVE-2024-13421)
The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1. This is due to the plugin not properly restricting the roles allowed to be selected during registration. This makes it possible for unauthenticated attackers to register a new administrative user account.
PLUGIN
Real Estate 7
CVE-2024-13421
Risk Score
Threat Entry
Updated 2026-06-17
Real Estate 7 - Cross-Site Scripting (XSS) (CVE-2022-47146)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Contempoinc Real Estate 7 WordPress theme
PLUGIN
Real Estate 7
CVE-2022-47146
Risk Score
Threat Entry
Updated 2026-06-17
Real Estate 7 - Cross-Site Scripting (XSS) (CVE-2021-24387)
The WP Pro Real Estate 7 WordPress theme before 3.1.1 did not properly sanitise the ct_community parameter in its search listing page before outputting it back in it, leading to a reflected Cross-Site Scripting which can be triggered in both unauthenticated or authenticated user context
PLUGIN
Real Estate 7
CVE-2021-24387
Risk Score