CVE-2024-13421
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Feb 12, 2025
Updated: Feb 25, 2025
CWE ID 266
Summary
CVE-2024-13421: The Real Estate 7 WordPress theme contains a privilege escalation vulnerability. In affected versions 3.5.1 and below, unauthenticated users can register new administrative accounts due to insufficient role restrictions during registration. This puts WordPress sites using this theme at risk of unauthorized administrative access.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share