Skip to content
OpenAdvisories

Vendor

contempoinc

9 known vulnerabilities.

Products

Real Estate 7 4 Real Estate 7 WordPress 3 WP Pro Real Estate 7 1 Contempo Real Estate Core 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2026-57343

    WordPress Real Estate 7 theme <= 3.5.9 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Real Estate 7 <= 3.5.9 versions.

    contempoinc Real Estate 7
  • High 7.3
    CVE-2025-39459 Public exploit

    WordPress Real Estate 7 theme <= 3.5.2 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in contempoinc Real Estate 7 realestate-7 allows Privilege Escalation.This issue affects Real Estate 7: from n/a through <= 3.5.2.

    contempoinc Real Estate 7
  • High 8.8
    CVE-2025-2891

    WP Pro Real Estate 7 <= 3.5.4 - Authenticated (Custom) Arbitrary File Upload

    The Real Estate 7 WordPress theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'template-submit-listing.php' file in all versions up to, and including, 3.5.4. This makes it possible for authenticated attack…

    contempoinc Real Estate 7 WordPress Web / CMS
  • High 7.1
    CVE-2022-47146

    WordPress Real Estate 7 Theme <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Contempoinc Real Estate 7 WordPress theme <= 3.3.1 versions.

    contempoinc Real Estate 7 WordPress Web / CMS