CyberSecBulletin

Contempoinc vulnerabilities

We track 3 vulnerabilities in Contempoinc products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 19, 2025.

3vulnerabilities
1critical
2high
0exploited
8.6average CVSS score

Latest Contempoinc vulnerabilities

  • 7.3 High severity

    Real Estate 7: Incorrect Privilege Assignment

    CVE-2025-39459Contempoinc

    Incorrect Privilege Assignment vulnerability in contempoinc Real Estate 7 realestate-7 allows Privilege Escalation.This issue affects Real Estate 7: from n/a through <= 3.5.2.

  • 8.8 High severity

    Real Estate 7 WordPress: Unrestricted Upload of File with Dangerous Type

    CVE-2025-2891Contempoinc

    The Real Estate 7 WordPress theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'template-submit-listing.php' file in all versions up to, and including, 3.5.4. This makes it possible for authenticated attacke

  • 9.8 Critical severity

    Real Estate 7 WordPress: Incorrect Privilege Assignment

    CVE-2024-13421Contempoinc

    The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1. This is due to the plugin not properly restricting the roles allowed to be selected during registration. This makes it possible f