Product

Real Estate Manager – Property Listing and Agent Management (<= 7.3)

1 brief RSS

Stored XSS in Real Estate Manager WordPress Plugin via CVE-2026-96667

The Real Estate Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) due to insufficient input sanitization of the first_name parameter, allowing unauthenticated attackers to bypass reCAPTCHA and execute arbitrary scripts.

Real Estate Manager – Property Listing and Agent Management wordpress xss web-application cve-2026-96667

1t 1c 2h ago