theme

Realhomes Vulnerabilities

10 known security issues reported for the Realhomes WordPress theme. Most recent disclosed Jun 25, 2026.

1 critical 3 high 1 medium

Running Realhomes on your site? Check whether your installed version is affected.

Scan your site free

RH - Real Estate WordPress Theme <= 4.5.3 - Authenticated (Subscriber+) PHP Object Injection

high

The RH - Real Estate WordPress Theme theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.5.3 via deserialization of untrusted input. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject a PHP Object. No known POP chain is present...

CVSS:
7.5
Affected:
up to 4.5.3
Fixed in:
4.5.4
Disclosed:
Jun 25, 2026

CVE-2026-56055 on NVD →

RealHomes [realhomes] < 4.4.1

unknown

[en] Incorrect Privilege Assignment vulnerability in InspiryThemes RealHomes allows Privilege Escalation. This issue affects RealHomes: from n/a through 4.4.0.

Affected:
up to 4.4.1
Fixed in:
4.4.1
Disclosed:
Jul 4, 2025

CVE-2025-49867 on NVD →

RH - Real Estate WordPress Theme <= 4.4.0 - Authenticated (Subscriber+) Privilege Escalation

high

The "RH - Real Estate WordPress Theme" theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.4.0. This is due to the theme not properly restricting user roles that can be updated as part of the inspiry_update_profile() function. This makes it possible for authenticated attack...

CVSS:
8.8
Affected:
up to 4.4.0
Fixed in:
4.4.1
Disclosed:
Jun 9, 2025

CVE-2025-4601 on NVD →

RealHomes <= 4.3.6 - Unauthenticated Privilege Escalation

critical

The RealHomes theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.3.6. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.

CVSS:
9.8
Affected:
up to 4.3.6
Fixed in:
4.3.7
Disclosed:
Jan 20, 2025

CVE-2024-32444 on NVD →

RealHomes [realhomes] <= 4.1.1 (unfixed)

unknown

[en] Missing Authorization vulnerability in InspiryThemes RealHomes.This issue affects RealHomes: from n/a through 4.0.2.

Affected:
up to 4.1.1
Fix:
No patched version reported
Disclosed:
Mar 25, 2024

CVE-2023-37885 on NVD →

RealHomes [realhomes] <= 4.1.1 (unfixed)

unknown

[en] Missing Authorization vulnerability in InspiryThemes RealHomes.This issue affects RealHomes: from n/a through 4.0.2.

Affected:
up to 4.1.1
Fix:
No patched version reported
Disclosed:
Mar 25, 2024

CVE-2023-37886 on NVD →

RealHomes <= 4.3.7 - Missing Authorization

high

The RealHomes theme for WordPress is vulnerable to unauthorized access due to a missing capability check an unknown function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action. Please note, there is not e...

CVSS:
7.3
Affected:
up to 4.3.7
Fixed in:
4.3.8
Disclosed:
Jul 11, 2023

CVE-2023-37885 on NVD →

RealHomes <= 4.3.7 - Missing Authorization

medium

The RealHomes theme for WordPress is vulnerable to unauthorized access due to a missing capability check an unknown function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action. Please note, there is not e...

CVSS:
6.3
Affected:
up to 4.3.7
Fixed in:
4.3.8
Disclosed:
Jul 11, 2023

CVE-2023-37886 on NVD →

RealHomes [realhomes] <= 4.3.6 (unfixed)

unknown
Affected:
up to 4.3.6
Fix:
No patched version reported

CVE-2024-32444 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database