2083 matches found
JoomlaUX JUX Real Estate 3.4.0 - Reflected XSS
A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla. It has been classified as problematic. Affected is an unknown function of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties. The manipulation of the argument Itemid/jpyearbuilt leads to cross...
WordPress Essential Real Estate <3.9.6 - Authenticated Cross-Site Scripting
WordPress Essential Real Estate plugin before 3.9.6 contains an authenticated cross-site scripting vulnerability. The plugin does not sanitize and escape some parameters, which can allow someone with a role as low as admin to inject arbitrary script in the browser of an unsuspecting user in the...
CVE-2025-39459
CVE-2025-39459 Real Estate 7 = 3.5.2 - Escalada de privilegios sin autenticar 🧨 CVE-2025-39459 — Real Estate 7 = 3.5.2 Escalada de privilegios sin autenticar 📌 Descripción general Este repositorio contiene una herramienta de prueba de concepto en Python para CVE-2025-39459 , que afecta al tema de...
CVE-2026-13714
CVE-2026-13714 Realtyna Organic IDX plugin + WPL Real Estate 5.3.0 - Carga arbitraria de archivos sin autenticar que deriva en ejecución remota de código CVE-2026-13714 — WPL Real Estate RCE sin autenticar Realtyna Organic IDX plugin + WPL Real Estate para WordPress 5.3.0 Carga arbitraria de...
CVE-2026-57811
CVE-2026-57811 — Realtyna Organic IDX + WPL Real Estate Unauthenticated RCE -red.svg Critical Unauthenticated Remote Code Execution CVSS 10.0 — Realtyna Organic IDX + WPL Real Estate ≤ 5.2.0 This tool exploits CVE-2026-57811 , a critical vulnerability in the Realtyna Organic IDX + WPL Real Estate...
CVE-2026-14483
CVE-2026-14483 — WPL Real Estate RCE Ejecución remota de código sin autenticación contra el plugin de WordPress Realtyna WPL Real Estate Listing...
CVE-2025-39459
CVE-2025-39459 Real Estate 7 = 3.5.2 - Escalada de Privilegios No Autenticada 🧨 CVE-2025-39459 — Real Estate 7 = 3.5.2 Escalada de Privilegios No Autenticada 📌 Resumen Este repositorio contiene una herramienta de prueba de concepto en Python para CVE-2025-39459 , que afecta al tema de WordPress...
CVE-2025-39459-Nuclei-Template
📄 Nuclei Template for CVE-2025-39459 🚀 Overview This repository features a Nuclei template specifically designed to detect an Unauthenticated Privilege Escalation Vulnerability CVE-2025-39459 in the Real Estate 7 WordPress Theme. This issue allows unauthenticated attackers to register as...
CVE-2026-13159
The Real Estate Papi WordPress theme through 1.0.5 does not perform capability or CSRF checks on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to install a fixed set of companion from the WordPress.org repository. Where the request runs in the session of a user w...
CVE-2026-13159 Real Estate Papi <= 1.0.5 - Subscriber+ Plugin Installation
The Real Estate Papi WordPress theme through 1.0.5 does not perform capability or CSRF checks on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to install a fixed set of companion from the WordPress.org repository. Where the request runs in the session of a user w...
CVE-2026-13159
CVE-2026-13159 affects the Real Estate Papi WordPress theme through version 1.0.5 . The root cause is a missing capability and CSRF check on one of the theme's AJAX actions, which allows any authenticated user (as low as a subscriber) to install a fixed set of companion plugins from the WordPress...
EUVD-2026-72061
The Real Estate Papi WordPress theme through 1.0.5 does not perform capability or CSRF checks on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to install a fixed set of companion from the WordPress.org repository. Where the request runs in the session of a user w...
CVE-2026-78244
A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipulation of the argument search/deliverytype/searchprice/propertytype results in sql injection. The attack may be initiated...
CVE-2026-78244
A SQL injection vulnerability exists in itsourcecode Real Estate Management System 1.0 , specifically in the file search.php . Manipulating the arguments search, delivery_type, search_price, or property_type allows an unauthenticated remote attacker to inject SQL, with no user interaction require...
EUVD-2026-64777
A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipulation of the argument search/deliverytype/searchprice/propertytype results in sql injection. The attack may be initiated...
CVE-2026-78244 itsourcecode Real Estate Management System search.php sql injection
A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipulation of the argument search/deliverytype/searchprice/propertytype results in sql injection. The attack may be initiated...
CVE-2026-32465
Customer PHP Object Injection in Essential Real Estate = 5.3.3 versions...
CVE-2026-32465
Essential Real Estate is a WordPress plugin affected by a PHP Object Injection vulnerability in versions 5.3.3 and below . The flaw is located in the plugin's customer-facing functionality, allowing an authenticated low-privilege user to inject a malicious PHP object over the network without user...
