CVEvulnerability

CVE-2024-13421

9.8 CRITICAL Published 2025-02-12 Modified 2026-06-17 Official page ↗

Status: Analyzed
Published: 2025-02-12
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-266

Description

The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1. This is due to the plugin not properly restricting the roles allowed to be selected during registration. This makes it possible for unauthenticated attackers to register a new administrative user account.

Affected configurations

• contempothemes real estate 7 (< 3.5.2)

Weakness · CWE (1)

CWE-266 Incorrect Privilege Assignment weakness

References

https://contempothemes.com/changelog/ Release Notes
https://themeforest.net/item/wp-pro-real-estate-7-responsive-real-estate-wordpress-theme/12473778 Product
https://www.wordfence.com/threat-intel/vulnerabilities/id/a50b3304-d55b-487a-8137-d5083c704cf4?source=cve Third Party Advisory

CVE-2024-13421

Description

Affected configurations

Related

Weakness · CWE (1)

References