Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-96667

1 brief RSS
high advisory

Stored XSS in Real Estate Manager WordPress Plugin via CVE-2026-96667

The Real Estate Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) due to insufficient input sanitization of the first_name parameter, allowing unauthenticated attackers to bypass reCAPTCHA and execute arbitrary scripts.

Real Estate Manager – Property Listing and Agent Management wordpress xss web-application cve-2026-96667
1t 1c