cbcvebase.

Apusthemes Wp Realestate vulnerabilities

1 known vulnerability affecting apusthemes/wp_realestate.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-2237P2CRITICALCVSS 9.8≤ 1.6.262025-04-01
CVE-2025-2237 [CRITICAL] CWE-269 CVE-2025-2237: The WP RealEstate plugin for WordPress, used by the Homeo theme, is vulnerable to privilege escalati The WP RealEstate plugin for WordPress, used by the Homeo theme, is vulnerable to privilege escalation in all versions up to, and including, 1.6.26. This is due to insufficient role restrictions in the 'process_register' function. This makes it possible for unauthenticated attackers to register an account with the Administrator role.
nvd
Apusthemes Wp Realestate vulnerabilities | cvebase