Contempoinc

Products

Product	CVEs	Exploited	Latest
Real Estate 7	4	–	Jul 2, 2026
Real Estate 7 WordPress	3	–	Apr 1, 2025
Contempo Real Estate Core	1	–	Apr 1, 2025
WP Pro Real Estate 7	1	–	Jul 6, 2021

CVE-2026-57343 High 7.1 WordPress Real Estate 7 theme <= 3.5.9 - Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2026-57641 Medium 6.5 WordPress Real Estate 7 theme <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
CVE-2026-54827 Critical 9.3 WordPress Real Estate 7 theme <= 3.5.9 - SQL Injection vulnerability 0.4%
CVE-2025-39459 High 7.3 WordPress Real Estate 7 theme <= 3.5.2 - Privilege Escalation vulnerability 0.4%
CVE-2025-2906 Medium 6.4 Contempo Real Estate Core <= 3.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
CVE-2025-2891 High 8.8 WP Pro Real Estate 7 <= 3.5.4 - Authenticated (Custom) Arbitrary File Upload 0.7%
CVE-2024-13421 Critical 9.8 Real Estate 7 WordPress <= 3.5.1 - Unauthenticated Privilege Escalation to Administrator 0.8%
CVE-2022-47146 High 7.1 WordPress Real Estate 7 Theme <= 3.3.1 is vulnerable to Cross Site Scripting (XSS) 0.4%
CVE-2021-24387 Unrated Real Estate 7 < 3.1.1 - Reflected Cross-Site Scripting (XSS) 3.7%