Vulnerabilities in Contempoinc
9 resultsCVE-2021-24387—Real Estate 7 < 3.1.1 - Reflected Cross-Site Scripting (XSS)EPSS 3.7%CVE-2024-13421CRITICALReal Estate 7 WordPress <= 3.5.1 - Unauthenticated Privilege Escalation to AdministratorEPSS 0.8%CVE-2025-2891HIGHWP Pro Real Estate 7 <= 3.5.4 - Authenticated (Custom) Arbitrary File UploadEPSS 0.7%CVE-2026-54827CRITICALWordPress Real Estate 7 theme <= 3.5.9 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-39459HIGHWordPress Real Estate 7 theme <= 3.5.2 - Privilege Escalation vulnerabilityEPSS 0.4%CVE-2022-47146HIGHWordPress Real Estate 7 Theme <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2025-2906MEDIUMContempo Real Estate Core <= 3.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2026-57343HIGHWordPress Real Estate 7 theme <= 3.5.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-57641MEDIUMWordPress Real Estate 7 theme <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%