Skip to content
OpenAdvisories

Vendor

contempoinc

9 known vulnerabilities.

Products

Real Estate 7 4 Real Estate 7 WordPress 3 WP Pro Real Estate 7 1 Contempo Real Estate Core 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-57641

    WordPress Real Estate 7 theme <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability

    Unauthenticated Cross Site Request Forgery (CSRF) in Real Estate 7 <= 3.5.9 versions.

    contempoinc Real Estate 7
  • Medium 6.4
    CVE-2025-2906

    Contempo Real Estate Core <= 3.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Contempo Real Estate Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.6.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possib…

    contempoinc Contempo Real Estate Core Web / CMS