GCVE - cpe:2.3:a:contempoinc:real_estate_7:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:contempoinc:real_estate_7:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Contempoinc (`d82485da-bd94-5e68-b660-c258fd1d48e4`)
Product	Real Estate 7 (`9204030f-86b0-58a0-9726-07905fa85b6b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-57641`	vulnerable	2026-07-29 01:03:15.798750	WordPress Real Estate 7 theme <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability MEDIUM (6.5) Unauthenticated Cross Site Request Forgery (CSRF) in Real Estate 7 <= 3.5.9 versions. Published: 2026-06-26T14:53:15.722Z Updated: 2026-06-26T15:36:01.540Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/theme/realestate-7/vulnerability/wordpress-real-estate-7-theme-3-5-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-57343`	vulnerable	2026-07-29 01:00:29.629245	WordPress Real Estate 7 theme <= 3.5.9 - Cross Site Scripting (XSS) vulnerability HIGH (7.1) Unauthenticated Cross Site Scripting (XSS) in Real Estate 7 <= 3.5.9 versions. Published: 2026-07-02T11:15:05.510Z Updated: 2026-07-02T19:43:28.706Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/theme/realestate-7/vulnerability/wordpress-real-estate-7-theme-3-5-9-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-54827`	vulnerable	2026-07-29 01:00:28.025286	WordPress Real Estate 7 theme <= 3.5.9 - SQL Injection vulnerability CRITICAL (9.3) Unauthenticated SQL Injection in Real Estate 7 <= 3.5.9 versions. Published: 2026-06-26T14:52:21.779Z Updated: 2026-06-26T20:19:14.295Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/theme/realestate-7/vulnerability/wordpress-real-estate-7-theme-3-5-9-sql-injection-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-39459`	vulnerable	2026-06-08 07:23:06.597395	WordPress Real Estate 7 theme <= 3.5.2 - Privilege Escalation vulnerability HIGH (7.3) Incorrect Privilege Assignment vulnerability in contempoinc Real Estate 7 realestate-7 allows Privilege Escalation.This issue affects Real Estate 7: from n/a through <= 3.5.2. Published: 2025-05-19T18:46:41.609Z Updated: 2026-04-28T16:12:32.044Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Theme/realestate-7/vulnerability/wordpress-real-estate-7-theme-3-5-2-privilege-escalation-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.