Skip to content
OpenAdvisories

Vendor

rameez_iqbal

10 known vulnerabilities.

Products

Real Estate Manager 7 Real Estate Manager – Property Listing and Agent Management 3
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.2
    CVE-2026-96667

    Real Estate Manager <= 7.3 - Unauthenticated Stored Cross-Site Scripting via 'first_name' Parameter

    The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'first_name' parameter in all versions up to, and including, 7.3 due to insufficient input sanitization and output escapi…

    rameez_iqbal Real Estate Manager – Property Listing and Agent Management Web / CMS
  • High 8.8
    CVE-2025-52825

    WordPress Real Estate Manager plugin <= 7.3 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Rameez Iqbal Real Estate Manager real-estate-manager allows Privilege Escalation.This issue affects Real Estate Manager: from n/a through <= 7.3.

    rameez_iqbal Real Estate Manager
  • High 7.3
    CVE-2025-32596

    WordPress Real Estate Manager plugin <= 7.3 - Arbitrary Code Execution vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in Rameez Iqbal Real Estate Manager real-estate-manager allows Code Injection.This issue affects Real Estate Manager: from n/a through <= 7.3.

    rameez_iqbal Real Estate Manager
  • High 8.1
    CVE-2025-32668

    WordPress Real Estate Manager plugin <= 7.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Rameez Iqbal Real Estate Manager real-estate-manager allows PHP Local File Inclusion.This issue affects Real Estate Manager: from n/a thro…

    rameez_iqbal Real Estate Manager
  • High 7.5
    CVE-2025-32150

    WordPress Real Estate Manager plugin <= 7.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Rameez Iqbal Real Estate Manager real-estate-manager allows PHP Local File Inclusion.This issue affects Real Estate Manager: from n/a thro…

    rameez_iqbal Real Estate Manager
  • High 8.8
    CVE-2023-4239

    Real Estate Manager <= 7.2 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation

    The Real Estate Manager plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 7.2 due to insufficient restriction on the 'rem_save_profile_front' function. This makes it possible for authenticated attackers, with minimal…

    rameez_iqbal Real Estate Manager – Property Listing and Agent Management Web / CMS