Incorrect Privilege Assignment vulnerability in contempoinc Real Estate 7 realestate-7 allows Privilege Escalation.This issue affects Real Estate 7: from n/a through <= 3.5.2.
PoC: CVE-2025-39459
Real Estate 7 <= 3.5.2 - Unauthenticated Privilege Escalation
PoC: CVE-2025-39459-Nuclei-Template
The Real Estate 7 WordPress theme is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.2. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.
PoC: CVE-2025-39459
Unauthenticated Privilege Escalation
PoC: CVE-2025-39459
Real Estate 7 <= 3.5.2 - Unauthenticated Privilege Escalation
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free