New FeatureAutomatic Bot Protection — multi-layer spam and bot hardening built directly into the theme, active out of the box with no configuration required. Includes honeypot field injection, submit timing detection, user-agent filtering, IP-based rate limiting (WordPress transients, no extra DB tables), and completed server-side Google reCAPTCHA v3 token verification. Automatically extends coverage to CT IDX Pro+ forms and search endpoints when the plugin is active. Security fixes applied to Zapier webhook endpoints (SSRF vulnerability resolved), the Book a Showing form (nonce added), and the Favorite Listings contact form (broken WordPress bootstrap and message syntax error corrected).
File affected: realestate-7 > includes > single-listing-contact.php
File affected: realestate-7 > includes > single-listing-lead-media-with-contact.php
File affected: realestate-7 > includes > single-listing-lead-media-with-contact-gallery-modal.php
File affected: realestate-7 > includes > ajax-single-listing.php
File affected: realestate-7 > author.php
File affected: realestate-7 > template-agents.php
New FeatureCo-Listing Agent functionality now built natively into RE7 replacing Co-Authors Plus (plugin automatically deactivated and deleted on update, feature auto-enabled if previously used)