WordPress theme
Real Estate 7 WordPress security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 15 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical2
- High4
- Medium9
- Low0
All Real Estate 7 WordPress vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤3.5.9Update to 3.6.0 | CVE-2026-57343 | |
| Medium4.3 | Cross-Site Request Forgery ≤3.5.9Update to 3.6.0 | CVE-2026-57641 | |
| High7.5 | Unauthenticated SQL Injection ≤3.5.9Update to 3.6.0 | CVE-2026-54827 | |
| Critical9.8 | Unauthenticated Privilege Escalation ≤3.5.2Update to 3.5.3 | CVE-2025-39459 | |
| High8.8 | Authenticated (Custom) Arbitrary File Upload ≤3.5.4Update to 3.5.5 | CVE-2025-2891 | |
| Critical9.8 | Unauthenticated Privilege Escalation to Administrator ≤3.5.1Update to 3.5.2 | CVE-2024-13421 | |
| Medium5.8 | Unauthenticated Arbitrary Email Sending ≤3.3.4Update to 3.3.5 | — | |
| Medium5.4 | Cross-Site Request Forgery ≤3.3.4Update to 3.3.5 | — | |
| Medium6.1 | Reflected Cross-Site Scripting via ct_additional_features ≤3.3.4Update to 3.3.5 | — | |
| High7.2 | Stored Cross-Site Scripting ≤3.3.1Update to 3.3.2 | CVE-2022-47146 | |
| Medium6.1 | Reflected Cross-Site Scripting <3.1.1Update to 3.1.1 | CVE-2021-24387 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤3.0.5Update to 3.0.6 | — | |
| Medium6.1 | Reflected Cross-Site Scripting ≤3.0.3Update to 3.0.4 | — | |
| Medium6.4 | Multiple Vulnerabilities <2.9.5Update to 2.9.5 | — | |
| Medium6.4 | Stored Cross-Site Scripting <2.9.1Update to 2.9.1 | — |
- High7.2Unauthenticated Stored Cross-Site Scripting
≤3.5.9Update to 3.6.0
- Medium4.3Cross-Site Request Forgery
≤3.5.9Update to 3.6.0
- High7.5Unauthenticated SQL Injection
≤3.5.9Update to 3.6.0
- Critical9.8Unauthenticated Privilege Escalation
≤3.5.2Update to 3.5.3
- High8.8Authenticated (Custom) Arbitrary File Upload
≤3.5.4Update to 3.5.5
- Critical9.8Unauthenticated Privilege Escalation to Administrator
≤3.5.1Update to 3.5.2
- Medium5.8Unauthenticated Arbitrary Email Sending
≤3.3.4Update to 3.3.5
- Medium5.4Cross-Site Request Forgery
≤3.3.4Update to 3.3.5
- Medium6.1Reflected Cross-Site Scripting via ct_additional_features
≤3.3.4Update to 3.3.5
- High7.2Stored Cross-Site Scripting
≤3.3.1Update to 3.3.2
- Medium6.1Reflected Cross-Site Scripting
<3.1.1Update to 3.1.1
- Medium6.1Reflected Cross-Site Scripting
≤3.0.5Update to 3.0.6
- Medium6.1Reflected Cross-Site Scripting
≤3.0.3Update to 3.0.4
- Medium6.4Multiple Vulnerabilities
<2.9.5Update to 2.9.5
- Medium6.4Stored Cross-Site Scripting
<2.9.1Update to 2.9.1
Real Estate 7 WordPress: common questions
Does Real Estate 7 WordPress have known vulnerabilities?
Yes. VulnCrest Radar lists 15 known vulnerabilities in Real Estate 7 WordPress: 2 critical, 4 high, 9 medium. None are known to affect version null.
How do I check which version of Real Estate 7 WordPress I run?
In wp-admin open Appearance → Themes and select the theme; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Real Estate 7 WordPress vulnerability?
CVE-2026-57343, published Jun 29, 2026: Real Estate 7 WordPress <= 3.5.9 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).
Is any Real Estate 7 WordPress vulnerability listed in CISA KEV?
No. None of the known Real Estate 7 WordPress vulnerabilities is currently listed in the CISA KEV catalog.