It Security

Critical zero-days impact premium WordPress real estate plugins

Teilen:

The RealHome theme and the Easy Real Estate plugins for WordPress are vulnerable to two critical severity flaws that allow unauthenticated users to gain administrative privileges.

Although the two flaws were discovered in September 2024 by Patchstack, and multiple attempts were made to contact the vendor (InspiryThemes), the researchers say they have not received a response.

Also, Patchstack says the vendor released three versions since September, but no security fixes to address the critical issues were introduced. Hence, the issues remain unfixed and exploitable.

Vulnerability details

The RealHome theme and Easy Real Estate are among the most popular themes and plugins designed for use in real estate websites. According to Envanto Market data, the RealHome theme is used in 32,600 websites.

The first flaw, which impacts RealHome theme, is an unauthenticated privilege escalation problem tracked as CVE-2024-32444 (CVSS score: 9.8).

The theme allows users to register new accounts via the inspiry_ajax_register function, however, it does not properly check authorization or implement a nonce validation.

If registration is enabled on the website, attackers can arbitrarily specify their role as “Administrator” in a specially crafted HTTP request to the registration function, essentially bypassing security checks.

Once registered as an administrator, the attacker can subsequently gain full control of the WordPress site, including performing content manipulation, planting scripts, and accessing user or other sensitive data.

The flaw impacting the Easy Real Estate plugin is another unauthenticated privilege escalation issue via the social login. It’s tracked under CVE-2024-32555 (CVSS score: 9.8).

The problem stems from the social login feature, which allows users to log in using their email address without verifying if it belongs to the person making the request.

As a result, if an attacker knows an admin’s email address, they can log in without needing a password. The repercussions of successful exploitation are similar to those of CVE-2024-32444.

Mitigation recommendations

As no patch has been released yet by InspiryThemes, website owners and administrators using the said theme or plugin should disable them immediately.

Restricting user registration on affected websites would also prevent unauthorized account creations, limiting the potential for exploitation.

As the problems on the two add-ons are now public, threat actors are bound to explore their potential and scan for vulnerable websites, so responding quickly to mitigate the threat is crucial at this point.

Quelle

Kommentar verfassen

Deine E-Mail-Adresse wird nicht veröffentlicht. Erforderliche Felder sind mit * markiert

lade-bild
London, GB
1:33 am, Feb. 12, 2025
Wetter-Symbol 4°C
L: 3° | H: 5°
overcast clouds
Luftfeuchtigkeit: 91 %
Druck: 1019 mb
Wind: 5 mph NNW
Windböe: 0 mph
UV-Index: 0
Niederschlag: 0 mm
Wolken: 100%
Regen Chance: 0%
Sichtbarkeit: 6 km
Sonnenaufgang: 7:20 am
Sonnenuntergang: 5:09 pm
TäglichStündlich
Tägliche VorhersageStündliche Vorhersage
Today 9:00 pm
Wetter-Symbol
3° | 5°°C 0 mm 0% 5 mph 89 % 1021 mb 0 mm/h
Tomorrow 9:00 pm
Wetter-Symbol
3° | 6°°C 0 mm 0% 9 mph 87 % 1025 mb 0 mm/h
Fr. Feb. 14 9:00 pm
Wetter-Symbol
1° | 6°°C 0 mm 0% 8 mph 81 % 1026 mb 0 mm/h
Sa. Feb. 15 9:00 pm
Wetter-Symbol
1° | 6°°C 0 mm 0% 8 mph 85 % 1024 mb 0 mm/h
So. Feb. 16 9:00 pm
Wetter-Symbol
4° | 8°°C 1 mm 100% 6 mph 95 % 1019 mb 0 mm/h
Today 3:00 am
Wetter-Symbol
4° | 4°°C 0 mm 0% 3 mph 89 % 1019 mb 0 mm/h
Today 6:00 am
Wetter-Symbol
4° | 4°°C 0 mm 0% 3 mph 79 % 1018 mb 0 mm/h
Today 9:00 am
Wetter-Symbol
4° | 4°°C 0 mm 0% 3 mph 76 % 1019 mb 0 mm/h
Today 12:00 pm
Wetter-Symbol
5° | 5°°C 0 mm 0% 3 mph 68 % 1019 mb 0 mm/h
Today 3:00 pm
Wetter-Symbol
6° | 6°°C 0 mm 0% 3 mph 71 % 1019 mb 0 mm/h
Today 6:00 pm
Wetter-Symbol
5° | 5°°C 0 mm 0% 5 mph 76 % 1020 mb 0 mm/h
Today 9:00 pm
Wetter-Symbol
5° | 5°°C 0 mm 0% 5 mph 78 % 1021 mb 0 mm/h
Tomorrow 12:00 am
Wetter-Symbol
3° | 3°°C 0 mm 0% 4 mph 87 % 1022 mb 0 mm/h
Name Preis24H (%)
Bitcoin(BTC)
€92,503.37
-2.20%
Ethereum(ETH)
€2,512.41
-3.65%
Fesseln(USDT)
€0.96
-0.04%
XRP(XRP)
€2.33
-1.88%
Solana(SOL)
€189.74
-3.37%
USDC(USDC)
€0.97
0.00%
Dogecoin(DOGE)
€0.243267
-2.47%
Shiba Inu(SHIB)
€0.000015
-1.91%
Pepe(PEPE)
€0.000010
-3.06%
Nach oben scrollen