WordPress theme
Real Estate 7 WordPress security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 15 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical2
- High4
- Medium9
- Low0
All Real Estate 7 WordPress vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤3.5.9Update to 3.6.0 | CVE-2026-57343 | |
| High7.5 | Unauthenticated SQL Injection ≤3.5.9Update to 3.6.0 | CVE-2026-54827 | |
| Critical9.8 | Unauthenticated Privilege Escalation ≤3.5.2Update to 3.5.3 | CVE-2025-39459 | |
| High8.8 | Authenticated (Custom) Arbitrary File Upload ≤3.5.4Update to 3.5.5 | CVE-2025-2891 | |
| Critical9.8 | Unauthenticated Privilege Escalation to Administrator ≤3.5.1Update to 3.5.2 | CVE-2024-13421 | |
| High7.2 | Stored Cross-Site Scripting ≤3.3.1Update to 3.3.2 | CVE-2022-47146 |
- High7.2Unauthenticated Stored Cross-Site Scripting
≤3.5.9Update to 3.6.0
- High7.5Unauthenticated SQL Injection
≤3.5.9Update to 3.6.0
- Critical9.8Unauthenticated Privilege Escalation
≤3.5.2Update to 3.5.3
- High8.8Authenticated (Custom) Arbitrary File Upload
≤3.5.4Update to 3.5.5
- Critical9.8Unauthenticated Privilege Escalation to Administrator
≤3.5.1Update to 3.5.2
- High7.2Stored Cross-Site Scripting
≤3.3.1Update to 3.3.2
Real Estate 7 WordPress: common questions
Does Real Estate 7 WordPress have known vulnerabilities?
Yes. VulnCrest Radar lists 15 known vulnerabilities in Real Estate 7 WordPress: 2 critical, 4 high, 9 medium. None are known to affect version null.
How do I check which version of Real Estate 7 WordPress I run?
In wp-admin open Appearance → Themes and select the theme; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Real Estate 7 WordPress vulnerability?
CVE-2026-57343, published Jun 29, 2026: Real Estate 7 WordPress <= 3.5.9 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).
Is any Real Estate 7 WordPress vulnerability listed in CISA KEV?
No. None of the known Real Estate 7 WordPress vulnerabilities is currently listed in the CISA KEV catalog.