RealHome & Easy Real Estate Plugins: A Comedy of Errors with Critical Flaws!
The RealHome theme and Easy Real Estate plugins for WordPress have critical flaws that let anyone become an admin without breaking a sweat. Despite being popular, they remain unfixed, leaving sites as vulnerable as a piñata at a kid’s birthday party. Disabling these plugins is highly recommended.
Hot Take:
Looks like your dream home might just be a hacker’s mansion! The real estate market isn’t the only thing with inflated values; CVSS scores are through the roof too. Time for WordPress users to pull a Houdini and disappear those vulnerabilities before the bad guys make themselves at home!
Key Points:
- Two critical flaws in the RealHome theme and Easy Real Estate plugins may let hackers gain admin rights.
- Flaws were found in September 2024, but the vendor has been radio silent on fixes.
- RealHome theme vulnerability lets attackers register as site admins via a poorly secured function.
- Easy Real Estate plugin flaw allows attackers to login as admin using only an email address.
- Immediate disabling of these tools is recommended to prevent unauthorized access.
Already a member? Log in here