WordPress Essential Real Estate <3.9.6 - Authenticated Cross-Site Scripting

WordPress Essential Real Estate plugin before 3.9.6 contains an authenticated cross-site scripting vulnerability. The plugin does not sanitize and escape some parameters, which can allow someone with a role as low as admin to inject arbitrary script in the browser of an unsuspecting user in the...

JoomlaUX JUX Real Estate 3.4.0 - Reflected XSS

A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla. It has been classified as problematic. Affected is an unknown function of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties. The manipulation of the argument Itemid/jpyearbuilt leads to cross...

CVE-2025-39459

CVE-2025-39459 Real Estate 7 = 3.5.2 - Escalade de privilèges non authentifiée 🧨 CVE-2025-39459 — Real Estate 7 = 3.5.2 Escalade de privilèges non authentifiée 📌 Aperçu Ce dépôt contient un outil de preuve de concept en Python pour CVE-2025-39459 , affectant le thème WordPress Real Estate 7 dans...

CVE-2026-13714

CVE-2026-13714 Плагин Realtyna Organic IDX + WPL Real Estate 5.3.0 — неаутентифицированная произвольная загрузка файлов, приводящая к удалённому выполнению кода CVE-2026-13714 — WPL Real Estate: RCE без аутентификации Плагин Realtyna Organic IDX + WPL Real Estate для WordPress 5.3.0...

WordPress Qode Real Estate plugin <= 1.1.7.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad in WordPress Plugin Qode Real Estate versions = 1.1.7.3...

CVE-2026-57811

CVE-2026-57811 — Realtyna Organic IDX + WPL Real Estate Неаутентифицированное удалённое выполнение кода -red.svg Критическое неаутентифицированное удалённое выполнение кода CVSS 10.0 — Realtyna Organic IDX + WPL Real Estate ≤ 5.2.0 Этот инструмент эксплуатирует CVE-2026-57811 , критическую...

CVE-2026-14483

CVE-2026-14483 — WPL Real Estate RCE Удалённое выполнение кода без аутентификации в WordPress-плагине Realtyna WPL Real Estate Listing. Поле| Детали ---|--- CVE| CVE-2026-14483 Затронутая версия| По умолчанию скрипт только эксплуатирует цели, на которых работает WPL 5.2.0. Используйте --force,...

CVE-2025-39459

CVE-2025-39459 Real Estate 7 = 3.5.2 — Неаутентифицированное повышение привилегий 🧨 CVE-2025-39459 — Real Estate 7 = 3.5.2 Неаутентифицированное повышение привилегий 📌 Обзор Этот репозиторий содержит PoC-инструмент на Python для CVE-2025-39459 , затрагивающего тему WordPress Real Estate 7 версий ...

CVE-2025-39459-Nuclei-Template

📄 Template Nuclei pour CVE-2025-39459 🚀 Présentation Ce dépôt contient un template Nuclei spécialement conçu pour détecter une Vulnérabilité d'Élévation de Privilèges Non Authentifiée CVE-2025-39459 dans le Thème WordPress Real Estate 7. Ce problème permet à des attaquants non authentifiés de...

CVE-2026-100752

CVE-2026-100752 — OrdaSoft Real Estate Manager Free, неаутентифицированная SQL-инъекция Python 3 PoC для CVE-2026-100752 — расширение Joomla OrdaSoft Real Estate Manager Free ≤ 6.7.8. Исправлено в 6.7.9+. | ---|--- PoCbit| https://pocbit.org/pocs/cve-2026-100752 Каталог| https://pocbit.org/pocs/...

CVE-2026-93908

The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'beforepricetext' parameter in all versions up to, and including, 7.3 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-93908 Real Estate Manager <= 7.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'before_price_text' Parameter

The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'beforepricetext' parameter in all versions up to, and including, 7.3 due to insufficient input sanitization and output escaping. This makes it possible for...

EUVD-2026-89683

The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'beforepricetext' parameter in all versions up to, and including, 7.3 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-93908 Real Estate Manager <= 7.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'before_price_text' Parameter

The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'beforepricetext' parameter in all versions up to, and including, 7.3 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-93908

The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 7.3 . The flaw exists in the 'before_price_text' parameter due to insufficient input sanitization and output escaping. Specif...

WordPress Real Estate Manager – Property Listing and Agent Management plugin <= 7.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin Real Estate Manager versions = 7.3...

PT-2026-103100

Name of the Vulnerable Software and Affected Versions Real Estate Manager – Property Listing and Agent Management versions prior to 7.4 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Authenticated attackers with subscriber-level access a...

CVE-2026-93908: Improper Neutralization of Input During Web Page Generation

The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'beforepricetext' parameter in all versions up to, and including, 7.3 due to insufficient input sanitization and output escaping. This makes it possible for...

Exploit for CVE-2026-100752

CVE-2026-100752 — OrdaSoft Real Estate Manager Free unauthen...

CVE-2026-100752

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager Free 6.7.9 - site/realestatemanager.php builds the ORDER BY clause of three separate frontend property-listing queries category browsing, search results, and the full property listing from a request-controlled...