PT-2025-33710 · WordPress · Real Spaces - Wordpress Properties Directory Theme

Alyudin Nafiie · Publicado 2025-08-19 · Atualizado 2025-08-24 · CVE-2025-8218

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Real Spaces - WordPress Properties Directory Theme versions prior to 3.6

Description: The Real Spaces - WordPress Properties Directory Theme for WordPress is susceptible to privilege escalation through the change role member parameter during profile updates. This occurs due to insufficient restrictions on the profile update role, allowing unauthenticated attackers to arbitrarily select their role, including Administrator.

Recommendations: Update Real Spaces - WordPress Properties Directory Theme to version 3.6 or later.

Correção

LPE

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2025-8218

Produtos afetados

Real Spaces - Wordpress Properties Directory Theme

Referências · 9

• https://twitter.com/CVEnew/status/1957703020424360209 · Publicação no Twitter
• https://themeforest.net/item/real-spaces-wordpress-real-estate-theme/8219779 · Nota
• https://t.me/CVEtracker/30335 · Publicação no Telegram
• https://wordfence.com/threat-intel/vulnerabilities/id/2d07880b-9af1-4b1e-aa70-b95ef10a6e33?source=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-8218 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/1957710738484596814 · Publicação no Twitter
• https://twitter.com/CveFindCom/status/1957717153009799646 · Publicação no Twitter
• https://t.me/cveNotify/132761 · Publicação no Telegram
• https://twitter.com/cracbot/status/1959571431928578257 · Publicação no Twitter