CVE-2026-57701 WordPress Real Estate Manager Pro plugin <= 12.8.5 - Reflected Cross Site Scripting (XSS) vulnerability

HighCVSS 7.1 EPSS 0.25%

Description

Unauthenticated Cross Site Scripting (XSS) in Real Estate Manager Pro <= 12.8.5 versions.

Product	Affected versions	Fixed in
WebCodingPlace Real Estate Manager Pro	< 12.8.6	12.8.6
wordpress real-estate-manager-pro(WordPress)	< 12.8.6	12.8.6

7.1 High

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

All scores (3)

EPSS (exploitation probability, 30 days): 0.25% (percentile 16.7)
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.