CVE-2026-57641
Deferred Deferred - Pending Action
Unauthenticated CSRF in Real Estate 7 <= 3.5.9

Publication date: 2026-06-26

Last updated on: 2026-06-26

Assigner: Patchstack

Description
Unauthenticated Cross Site Request Forgery (CSRF) in Real Estate 7 <= 3.5.9 versions.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-26
Last Modified
2026-06-26
Generated
2026-06-26
AI Q&A
2026-06-26
EPSS Evaluated
N/A
NVD
CVE-2026-57641
EUVD
EUVD-2026-39756
Affected Vendors & Products
Currently, no data is known.
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-352 The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2026-57641 is a Cross Site Request Forgery (CSRF) vulnerability affecting the WordPress Real Estate 7 Theme versions 3.5.9 and below.

This vulnerability allows an attacker to trick a privileged user into performing unwanted actions by making them click a malicious link or submit a malicious form while authenticated.

It falls under the OWASP Top 10 category of Broken Access Control and requires user interaction to be exploited.

Impact Analysis

Successful exploitation of this vulnerability could allow an attacker to force higher privileged users to execute unwanted actions under their current authentication.

While the vulnerability does not impact confidentiality or integrity directly, it can cause availability issues or other harmful effects due to unauthorized actions being performed.

The CVSS score of 6.5 indicates a moderate risk level.

Compliance Impact

The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Mitigation Strategies

To mitigate the CVE-2026-57641 vulnerability, users should immediately update the WordPress Real Estate 7 Theme to version 3.6.0 or later.

This update patches the Cross Site Request Forgery (CSRF) vulnerability that affects versions 3.5.9 and below.

Since the vulnerability requires user interaction, it is also advisable to educate privileged users about the risks of clicking on suspicious links or submitting untrusted forms.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57641. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart