CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Real Spaces - WordPress Properties Directory Theme theme for WordPress is vulnerable to privilege escalation via the 'change_role_member' parameter in all versions up to, and including, 3.5. This is due to a lack of restriction in the profile update role. This makes it possible for unauthenticated attackers to arbitrarily choose their role, including the Administrator role, during a profile update.
Explanation of Vulnerability in Simple Terms
The Real Spaces WordPress theme versions 3.5 and earlier contain a privilege management flaw that allows authenticated users with low-level permissions to perform actions restricted to higher-privilege roles. An attacker with a basic user account can read sensitive data, modify site content, or disrupt availability. Update to a version newer than 3.5 immediately.
What an attacker can do
Read sensitive data, modify content, or disrupt site availability with a low-privilege user account.
Potential impact on your site
Compromised user accounts can escalate privileges and access or modify protected property listings and site data.
Conditions required to exploit
Attacker needs a valid low-privilege user account on the WordPress site; no user interaction required.
Key dates
External resources
Related vulnerabilities
