The Real Spaces – WordPress Properties Directory Theme for WordPress is vulnerable to privilege escalation via the ‘imic_agent_register’ function in all versions up to and including 3.6. This vulnerability arises from a lack of restriction in the registration role, allowing unauthenticated attackers to arbitrarily select their role, including the Administrator role, during user registration.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2025-6758 |
Exploitation
To exploit this vulnerability, an attacker can register a new user account on a site using the Real Spaces theme without any authentication. By manipulating the registration process, the attacker can assign themselves a role with elevated privileges, such as Administrator, thereby gaining unauthorized access to the site’s administrative functions.
Affected Products
- Real Spaces – WordPress Properties Directory Theme: A theme for WordPress that allows users to create property listings, now vulnerable to privilege escalation.
Mitigation
To mitigate this vulnerability, it is recommended to update the Real Spaces theme to the latest version that addresses this issue. Additionally, site administrators should review user registration processes and implement role restrictions to prevent unauthorized role assignments.