CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Real Estate 7 WordPress theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'template-submit-listing.php' file in all versions up to, and including, 3.5.4. This makes it possible for authenticated attackers, with Seller-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible if front-end listing submission has been enabled.
Explanation of Vulnerability in Simple Terms
The Real Estate 7 WordPress plugin versions 3.5.4 and earlier allow authenticated users with low privileges to upload files without proper validation. An attacker can upload malicious files, including PHP scripts, to execute arbitrary code on the site. This affects confidentiality, integrity, and availability of the WordPress installation.
What an attacker can do
Upload and execute malicious files (including PHP code) on the site.
Potential impact on your site
Site can be fully compromised; attacker gains ability to read data, modify content, and disrupt service.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor role).
Key dates
External resources
