Contempoinc
6 CVEs across 4 Contempoinc products. Browse Contempoinc vulnerabilities, severities, and proof-of-concept exploits.
Contempoinc products with known CVEs
Contempoinc CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-57343 | High | 7.1 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in Real Estate 7 <= 3.5.9 versions. |
CVE-2026-57641 | Medium | 6.5 | 2026-06-26 | Unauthenticated Cross Site Request Forgery (CSRF) in Real Estate 7 <= 3.5.9 versions. |
CVE-2026-54827 | Critical | 9.3 | 2026-06-26 | Unauthenticated SQL Injection in Real Estate 7 <= 3.5.9 versions. |
CVE-2025-39459 | High | 7.3 | 2025-05-19 | Incorrect Privilege Assignment vulnerability in contempoinc Real Estate 7 realestate-7 allows Privilege Escalation.This issue affects Real Estate 7: from n/a t… |
CVE-2025-2906 | Medium | 6.4 | 2025-04-01 | The Contempo Real Estate Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.6.3 due to i… |
CVE-2025-2891 | High | 8.8 | 2025-04-01 | The Real Estate 7 WordPress theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'template-submit-listing.ph… |
CVE-2024-13421 | Critical | 9.8 | 2025-02-12 | The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1. This is due to the plugin no… |
CVE-2022-47146 | High | 7.1 | 2023-03-27 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Contempoinc Real Estate 7 WordPress theme <= 3.3.1 versions. |
CVE-2021-24387 | Medium | 6.1 | 2021-07-06 | The WP Pro Real Estate 7 WordPress theme before 3.1.1 did not properly sanitise the ct_community parameter in its search listing page before outputting it back… |