RH - Real Estate WordPress Theme <= 4.5.3 - Authenticated (Subscriber+) PHP Object Injection
high
The RH - Real Estate WordPress Theme theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.5.3 via deserialization of untrusted input. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject a PHP Object. No known POP chain is present...
- CVSS:
- 7.5
- Affected:
- up to 4.5.3
- Fixed in:
- 4.5.4
- Disclosed:
- Jun 25, 2026
CVE-2026-56055 on NVD →
RealHomes [realhomes] < 4.4.1
unknown
[en] Incorrect Privilege Assignment vulnerability in InspiryThemes RealHomes allows Privilege Escalation. This issue affects RealHomes: from n/a through 4.4.0.
- Affected:
- up to 4.4.1
- Fixed in:
- 4.4.1
- Disclosed:
- Jul 4, 2025
CVE-2025-49867 on NVD →
RH - Real Estate WordPress Theme <= 4.4.0 - Authenticated (Subscriber+) Privilege Escalation
high
The "RH - Real Estate WordPress Theme" theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.4.0. This is due to the theme not properly restricting user roles that can be updated as part of the inspiry_update_profile() function. This makes it possible for authenticated attack...
- CVSS:
- 8.8
- Affected:
- up to 4.4.0
- Fixed in:
- 4.4.1
- Disclosed:
- Jun 9, 2025
CVE-2025-4601 on NVD →
RealHomes <= 4.3.6 - Unauthenticated Privilege Escalation
critical
The RealHomes theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.3.6. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.
- CVSS:
- 9.8
- Affected:
- up to 4.3.6
- Fixed in:
- 4.3.7
- Disclosed:
- Jan 20, 2025
CVE-2024-32444 on NVD →
RealHomes [realhomes] <= 4.1.1 (unfixed)
unknown
[en] Missing Authorization vulnerability in InspiryThemes RealHomes.This issue affects RealHomes: from n/a through 4.0.2.
- Affected:
- up to 4.1.1
- Fix:
- No patched version reported
- Disclosed:
- Mar 25, 2024
CVE-2023-37885 on NVD →
RealHomes [realhomes] <= 4.1.1 (unfixed)
unknown
[en] Missing Authorization vulnerability in InspiryThemes RealHomes.This issue affects RealHomes: from n/a through 4.0.2.
- Affected:
- up to 4.1.1
- Fix:
- No patched version reported
- Disclosed:
- Mar 25, 2024
CVE-2023-37886 on NVD →
RealHomes <= 4.3.7 - Missing Authorization
high
The RealHomes theme for WordPress is vulnerable to unauthorized access due to a missing capability check an unknown function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action. Please note, there is not e...
- CVSS:
- 7.3
- Affected:
- up to 4.3.7
- Fixed in:
- 4.3.8
- Disclosed:
- Jul 11, 2023
CVE-2023-37885 on NVD →
RealHomes <= 4.3.7 - Missing Authorization
medium
The RealHomes theme for WordPress is vulnerable to unauthorized access due to a missing capability check an unknown function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action. Please note, there is not e...
- CVSS:
- 6.3
- Affected:
- up to 4.3.7
- Fixed in:
- 4.3.8
- Disclosed:
- Jul 11, 2023
CVE-2023-37886 on NVD →
RealHomes [realhomes] <= 4.3.6 (unfixed)
unknown
- Affected:
- up to 4.3.6
- Fix:
- No patched version reported
CVE-2024-32444 on NVD →
RealHomes [realhomes] < 4.4.1
unknown
- Affected:
- up to 4.4.1
- Fixed in:
- 4.4.1
CVE-2025-4601 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database