Real Estate Manager – Property Listing and Agent Management

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Real Estate Manager – Property Listing and Agent Management

Information

Software Type Plugin
Software Slug real-estate-manager (view on wordpress.org)
Software Status Removed
Software Author rameez_iqbal
Software Website wp-rem.com
Software Downloads 43,011
Software Active Installs 500
Software Record Last Updated September 26, 2026

11 Vulnerabilities

Submit a Vulnerability
Real Estate Manager <= 7.3 - Unauthenticated Stored Cross-Site Scripting via 'first_name' Parameter
7.2
CVE-2026-96667
Oct 9, 2026
Researcher: Morato Antoine
Real Estate Manager <= 7.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'before_price_text' Parameter
6.4
CVE-2026-93908
Sep 29, 2026
Researcher: theviper17y
Real Estate Manager <= 7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-58253
Sep 22, 2025
Researcher: Muhammad Yudha - DJ
Real Estate Manager <= 7.3 - Cross-Site Request Forgery
4.3
CVE-2025-50044
Jun 19, 2025
Researcher: Kévin Mosbahi (Mika)
Real Estate Manager <= 7.3 - Cross-Site Request Forgery
4.3
CVE-2025-52825
Jun 19, 2025
Researcher: 0xd4rk5id3
Real Estate Manager <= 7.3 - Unauthenticated Remote Code Execution
9.8
CVE-2025-32596
Apr 15, 2025
Researcher: theviper17y
Real Estate Manager <= 7.3 - Unauthenticated Local File Inclusion
9.8
CVE-2025-32668
Apr 9, 2025
Researcher: LVT-tholv2k
Real Estate Manager <= 7.3 - Authenticated (Contributor+) Local File Inclusion
8.8
CVE-2025-32150
Apr 4, 2025
Researcher: LVT-tholv2k
Real Estate Manager – Property Listing and Agent Management <= 7.3 - CAPTCHA Bypass
5.3
CVE-2025-22645
Feb 3, 2025
Researcher: Marek Mikita
Real Estate Manager <= 7.2 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation
8.8
CVE-2023-4239
Aug 8, 2023
Researcher: István Márton
Real Estate Manager – Property Listing and Agent Management <= 6.8 - Cross-Site Scripting
6.1
CVE ID Unknown
Jun 13, 2019
Researchers:
Title Status CVE ID CVSS Researchers Date
Real Estate Manager <= 7.3 - Unauthenticated Stored Cross-Site Scripting via 'first_name' Parameter Patched CVE-2026-96667 7.2 Morato Antoine October 9, 2026
Real Estate Manager <= 7.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'before_price_text' Parameter Unpatched CVE-2026-93908 6.4 theviper17y September 29, 2026
Real Estate Manager <= 7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Unpatched CVE-2025-58253 6.4 Muhammad Yudha - DJ September 22, 2025
Real Estate Manager <= 7.3 - Cross-Site Request Forgery Unpatched CVE-2025-50044 4.3 Kévin Mosbahi (Mika) June 19, 2025
Real Estate Manager <= 7.3 - Cross-Site Request Forgery Unpatched CVE-2025-52825 4.3 0xd4rk5id3 June 19, 2025
Real Estate Manager <= 7.3 - Unauthenticated Remote Code Execution Unpatched CVE-2025-32596 9.8 theviper17y April 15, 2025
Real Estate Manager <= 7.3 - Unauthenticated Local File Inclusion Unpatched CVE-2025-32668 9.8 LVT-tholv2k April 9, 2025
Real Estate Manager <= 7.3 - Authenticated (Contributor+) Local File Inclusion Unpatched CVE-2025-32150 8.8 LVT-tholv2k April 4, 2025
Real Estate Manager – Property Listing and Agent Management <= 7.3 - CAPTCHA Bypass Unpatched CVE-2025-22645 5.3 Marek Mikita February 3, 2025
Real Estate Manager <= 7.2 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation Unpatched CVE-2023-4239 8.8 István Márton August 8, 2023
Real Estate Manager – Property Listing and Agent Management <= 6.8 - Cross-Site Scripting Patched 6.1 June 13, 2019

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation