Real Estate 7 WordPress vulnerabilities
2 known vulnerabilities in Real Estate 7 WordPress from Contempoinc. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest first
- 8.8 High severity
Real Estate 7 WordPress: Unrestricted Upload of File with Dangerous Type
The Real Estate 7 WordPress theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'template-submit-listing.php' file in all versions up to, and including, 3.5.4. This makes it possible for authenticated attacke
- 9.8 Critical severity
Real Estate 7 WordPress: Incorrect Privilege Assignment
The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1. This is due to the plugin not properly restricting the roles allowed to be selected during registration. This makes it possible f