CVE-2026-42632: WordPress Qode Real Estate plugin <= 1.1.7.3 - Cross Site Scripting (XSS) vulnerability

Q: What level of access does an attacker need to exploit this issue?

No authentication is required. Exploitation does require user interaction, consistent with the UI:R vector.

Q: What versions should be considered affected?

Qode Real Estate versions 1.1.7.3 and earlier are identified as affected. The provided data does not state which version contains a fix.

Q: What impact could successful exploitation have?

The vulnerability is rated high severity with a 7.1 CVSS score. Its vector indicates low confidentiality, integrity, and availability impact, with impacts extending beyond the vulnerable component.

Published Oct 10, 2026

Updated

Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions.

Affected Software

1 affected component

Qode Qode Real Estate<=1.1.7.3

Event History

Oct 10, 2026

CVE Published

via MITRE·07:35 PM

Data Sourced

via MITRE·07:35 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

No authentication is required. Exploitation does require user interaction, consistent with the UI:R vector.

What versions should be considered affected?

Qode Real Estate versions 1.1.7.3 and earlier are identified as affected. The provided data does not state which version contains a fix.

What impact could successful exploitation have?

The vulnerability is rated high severity with a 7.1 CVSS score. Its vector indicates low confidentiality, integrity, and availability impact, with impacts extending beyond the vulnerable component.

CVE-2026-42632: WordPress Qode Real Estate plugin <= 1.1.7.3 - Cross Site Scripting (XSS) vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What versions should be considered affected?

What impact could successful exploitation have?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What versions should be considered affected?

What impact could successful exploitation have?