WP-Safety

Shift8 Real Estate Listings for TRREB Security & Risk Analysis

wordpress.org/plugins/shift8-real-estate-listings-for-treb

Sync Toronto Real Estate Board (TRREB) listings via PropTx RESO Web API to WordPress posts automatically.

10 active installs v1.8.1 PHP 7.4+ WP 5.0+ Updated Mar 5, 2026
listingsmlstrproptxreal-estatetrreb
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Shift8 Real Estate Listings for TRREB Safe to Use in 2026?

Generally Safe

Score 100/100

Shift8 Real Estate Listings for TRREB has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

Based on the provided static analysis and vulnerability history, the "shift8-real-estate-listings-for-treb" plugin v1.8.1 appears to have a strong security posture. The code analysis indicates a significant effort to implement security best practices, with all detected AJAX handlers and shortcodes (though none were found) having proper authentication checks. Furthermore, the absence of dangerous functions, the exclusive use of prepared statements for SQL queries, and 100% output escaping suggest robust protection against common web vulnerabilities like SQL injection and XSS. The plugin also demonstrates good security hygiene with the presence of nonce and capability checks for its entry points.

Key Concerns

  • No identified security vulnerabilities in history
  • All AJAX handlers have auth checks
  • No REST API routes found
  • No shortcodes found
  • No taint flows with unsanitized paths
  • No dangerous functions detected
  • 100% SQL queries use prepared statements
  • 100% output properly escaped
  • Presence of nonce checks on entry points
  • Presence of capability checks on entry points
  • No bundled libraries (reduces risk of outdated dependencies)
Vulnerabilities
None known

Shift8 Real Estate Listings for TRREB Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Shift8 Real Estate Listings for TRREB Release Timeline

v1.8.1Current
v1.8.0
v1.7.4
v1.7.3
v1.7.2
v1.7.1
v1.7.0
v1.6.6
v1.6.5
v1.6.4
v1.6.2
Code Analysis
Analyzed Apr 16, 2026

Shift8 Real Estate Listings for TRREB Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
1044 escaped
Nonce Checks
8
Capability Checks
10
File Operations
6
External Requests
12
Bundled Libraries
0

Output Escaping

100% escaped1044 total outputs
Attack Surface

Shift8 Real Estate Listings for TRREB Attack Surface

Entry Points8
Unprotected0

AJAX Handlers 8

authwp_ajax_shift8_treb_test_api_connectionadmin/class-shift8-treb-admin.php:39
authwp_ajax_shift8_treb_manual_syncadmin/class-shift8-treb-admin.php:40
authwp_ajax_shift8_treb_reset_syncadmin/class-shift8-treb-admin.php:41
authwp_ajax_shift8_treb_get_citiesadmin/class-shift8-treb-admin.php:42
authwp_ajax_shift8_treb_test_api_connectiontrunk/admin/class-shift8-treb-admin.php:39
authwp_ajax_shift8_treb_manual_synctrunk/admin/class-shift8-treb-admin.php:40
authwp_ajax_shift8_treb_reset_synctrunk/admin/class-shift8-treb-admin.php:41
authwp_ajax_shift8_treb_get_citiestrunk/admin/class-shift8-treb-admin.php:42
WordPress Hooks 22
actionadmin_menuadmin/class-shift8-treb-admin.php:34
actionadmin_enqueue_scriptsadmin/class-shift8-treb-admin.php:36
actionadmin_noticesshift8-treb.php:130
actionplugins_loadedshift8-treb.php:177
filtercron_schedulesshift8-treb.php:184
actionshift8_treb_sync_listingsshift8-treb.php:187
actionshift8_treb_cleanup_terminatedshift8-treb.php:190
actionadmin_initshift8-treb.php:193
actionwp_enqueue_scriptsshift8-treb.php:201
actionwp_enqueue_scriptsshift8-treb.php:204
actionwp_enqueue_scriptsshift8-treb.php:207
actionadmin_menutrunk/admin/class-shift8-treb-admin.php:34
actionadmin_enqueue_scriptstrunk/admin/class-shift8-treb-admin.php:36
actionadmin_noticestrunk/shift8-treb.php:130
actionplugins_loadedtrunk/shift8-treb.php:177
filtercron_schedulestrunk/shift8-treb.php:184
actionshift8_treb_sync_listingstrunk/shift8-treb.php:187
actionshift8_treb_cleanup_terminatedtrunk/shift8-treb.php:190
actionadmin_inittrunk/shift8-treb.php:193
actionwp_enqueue_scriptstrunk/shift8-treb.php:201
actionwp_enqueue_scriptstrunk/shift8-treb.php:204
actionwp_enqueue_scriptstrunk/shift8-treb.php:207

Scheduled Events 4

shift8_treb_sync_listings
shift8_treb_cleanup_terminated
shift8_treb_sync_listings
shift8_treb_cleanup_terminated
Maintenance & Trust

Shift8 Real Estate Listings for TRREB Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedMar 5, 2026
PHP min version7.4
Downloads680

Community Trust

Rating100/100
Number of ratings1
Active installs10
Alternatives

Shift8 Real Estate Listings for TRREB Alternatives

Estatik Real Estate Plugin

Estatik Real Estate Plugin

estatik

D
31

You will love its clean design, simple use, and colorful themes. WordPress real estate plugin Estatik is a worthy choice for single agents and portals …

10K 2 unpatched
Easy Property Listings

Easy Property Listings

easy-property-listings

A
89

Fast. Flexible. Forward-thinking solution for real estate agents using WordPress. Built for scale, listing management and works with any theme.

5K 8 CVEs
Advanced Classifieds & Directory Pro

Advanced Classifieds & Directory Pro

advanced-classifieds-and-directory-pro

A
92

Build any kind of directory site: classifieds, cars, bikes & other vehicles dealers site, pets, real estate portal, yellow pages, etc...

2K 4 CVEs
Diverse Solutions IDX Real Estate Listings & MLS Search

Diverse Solutions IDX Real Estate Listings & MLS Search

dsidxpress

A
100

Easily add mobile and SEO-friendly MLS listings to your website to attract & engage visitors, plus lead capture tools to turn them into clients.

1K 1 CVE
Directory Listings WordPress plugin – uListing

Directory Listings WordPress plugin – uListing

ulisting

F
2

This directory listings WordPress plugin is a fantastic tool for creating a professional business directory listings website on WordPress with no hass …

1K 6 unpatched
Developer Profile

Shift8 Real Estate Listings for TRREB Developer Profile

shift8

16 plugins · 950 total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Shift8 Real Estate Listings for TRREB

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/shift8-real-estate-listings-for-treb/assets/css/shift8-treb-frontend.css/wp-content/plugins/shift8-real-estate-listings-for-treb/assets/css/shift8-treb-map.css/wp-content/plugins/shift8-real-estate-listings-for-treb/assets/js/shift8-treb-frontend.js/wp-content/plugins/shift8-real-estate-listings-for-treb/assets/js/shift8-treb-map.js
Version Parameters
/wp-content/plugins/shift8-real-estate-listings-for-treb/assets/css/shift8-treb-frontend.css?ver=/wp-content/plugins/shift8-real-estate-listings-for-treb/assets/css/shift8-treb-map.css?ver=/wp-content/plugins/shift8-real-estate-listings-for-treb/assets/js/shift8-treb-frontend.js?ver=/wp-content/plugins/shift8-real-estate-listings-for-treb/assets/js/shift8-treb-map.js?ver=

HTML / DOM Fingerprints

CSS Classes
shift8-treb-listing-mapshift8-treb-listing-detailsshift8-treb-map-canvasshift8-treb-listing-galleryshift8-treb-listing-gallery-image
Data Attributes
data-shift8-treb-map-optionsdata-shift8-treb-marker-optionsdata-shift8-treb-listing-id
JS Globals
shift8TrebFrontendshift8TrebMap
REST Endpoints
/wp-json/shift8-treb/v1/listings
Shortcode Output
[shift8_treb_listings][shift8_treb_listing_map]
FAQ

Frequently Asked Questions about Shift8 Real Estate Listings for TRREB