The Real Spaces – WordPress Properties Directory Theme for WordPress is vulnerable to privilege escalation via the ‘imic_agent_register’ function in all versions up to and including 3.6. This vulnerability arises from a lack of restriction in the registration role, allowing unauthenticated attackers to arbitrarily choose their role, including the Administrator role, during user registration.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2025-6758 |
Exploitation
To exploit this vulnerability, an attacker can register a new user account on a site using the Real Spaces theme without any authentication. By manipulating the registration process, the attacker can assign themselves an Administrator role, granting them full control over the site.
Affected Products
- Real Spaces – WordPress Properties Directory Theme: A theme for WordPress that allows users to create property listings, now vulnerable to privilege escalation.
Mitigation
To mitigate this vulnerability, it is recommended to update the Real Spaces theme to the latest version that addresses this issue. Additionally, implementing role-based access controls and monitoring user registrations can help prevent unauthorized role assignments.