Blog

"Prevention is cheaper than a breach"

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total2
Critical1
High1
Medium0
Reset
Showing 1-2 of 2 records
Threat Entry Updated 2025-08-19

CVE-2025-6758 - Real Spaces Wordpress Properties Directory Theme

The Real Spaces - WordPress Properties Directory Theme theme for WordPress is vulnerable to privilege escalation via the 'imic_agent_register' function in all versions up to, and including, 3.6. This is due to a lack of restriction in the registration role. This makes it possible for unauthenticated attackers to arbitrarily choose their role, including the Administrator role, during user registration.

THEME Real Spaces Wordpress Properties Directory Theme

CVE-2025-6758

CRITICAL CVSS 9.8 2025-08-19
Threat Entry Updated 2025-08-19

CVE-2025-8218 - Real Spaces Wordpress Properties Directory Theme

The Real Spaces - WordPress Properties Directory Theme theme for WordPress is vulnerable to privilege escalation via the 'change_role_member' parameter in all versions up to, and including, 3.5. This is due to a lack of restriction in the profile update role. This makes it possible for unauthenticated attackers to arbitrarily choose their role, including the Administrator role, during a profile update.

THEME Real Spaces Wordpress Properties Directory Theme

CVE-2025-8218

HIGH CVSS 8.8 2025-08-19
Scroll to top