← WordPress Vulnerabilities
WordPress security by component

Real Estate 7

Real Estate 7 is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Feb 12, 2025; the highest CVE/CNA score is 9.8.

Theme slug: real-estate-7

CVE-2024-13421: Real Estate 7: Privilege escalation or authentication bypass

Real Estate 7 is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.

PublishedFeb 12, 2025
Safe version guidanceSee mitigation notes
Safe version
Feb 12, 2025 CVE-2024-13421
Real Estate 7: Privilege escalation or authentication bypass
Real Estate 7 is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.
See mitigation notes
CVE9.8
NVDPending
Jul 06, 2021 CVE-2021-24387
WP Pro Real Estate 7: Cross-site scripting
WP Pro Real Estate 7 is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.1
NVD6.1