CVE-2024-13421

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Feb 12, 2025
Updated: Feb 25, 2025
CWE ID 266

Summary

CVE-2024-13421: The Real Estate 7 WordPress theme contains a privilege escalation vulnerability. In affected versions 3.5.1 and below, unauthenticated users can register new administrative accounts due to insufficient role restrictions during registration. This puts WordPress sites using this theme at risk of unauthorized administrative access.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share