Contempoinc

9 CVEs across 4 Contempoinc products. Browse Contempoinc vulnerabilities, severities, and proof-of-concept exploits.

Contempoinc products with known CVEs

ProductCVEs
Real Estate 74
Real Estate 7 WordPress3
Contempo Real Estate Core1
Wp Pro Real Estate 71
Contempoinc CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57343High7.12026-07-02Unauthenticated Cross Site Scripting (XSS) in Real Estate 7 <= 3.5.9 versions.
CVE-2026-57641Medium6.52026-06-26Unauthenticated Cross Site Request Forgery (CSRF) in Real Estate 7 <= 3.5.9 versions.
CVE-2026-54827Critical9.32026-06-26Unauthenticated SQL Injection in Real Estate 7 <= 3.5.9 versions.
CVE-2025-39459High7.32025-05-19Incorrect Privilege Assignment vulnerability in contempoinc Real Estate 7 realestate-7 allows Privilege Escalation.This issue affects Real Estate 7: from n/a t…
CVE-2025-2906Medium6.42025-04-01The Contempo Real Estate Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.6.3 due to i…
CVE-2025-2891High8.82025-04-01The Real Estate 7 WordPress theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'template-submit-listing.ph…
CVE-2024-13421Critical9.82025-02-12The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1. This is due to the plugin no…
CVE-2022-47146High7.12023-03-27Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Contempoinc Real Estate 7 WordPress theme <= 3.3.1 versions.
CVE-2021-24387Medium6.12021-07-06The WP Pro Real Estate 7 WordPress theme before 3.1.1 did not properly sanitise the ct_community parameter in its search listing page before outputting it back…