https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 20:22:52 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-282840 EUVD-2026-282840 https://cve.radiocsirt.org/vuln/euvd-2026-282840 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8218 <p>The Real Spaces - WordPress Properties Directory Theme theme for WordPress is vulnerable to privilege escalation via the &#39;change_role_member&#39; parameter in all versions up to, and including, 3.5. This is due to a lack of restriction in the profile update role. This makes it possible for unauthenticated attackers to arbitrarily choose their role, including the Administrator role, during a profile update.</p> <p>The Real Spaces - WordPress Properties Directory Theme theme for WordPress is vulnerable to privilege escalation via the &#39;change_role_member&#39; parameter in all versions up to, and including, 3.5. This is due to a lack of restriction in the profile update role. This makes it possible for unauthenticated attackers to arbitrarily choose their role, including the Administrator role, during a profile update.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-8218 https://cve.radiocsirt.org/vuln/ghsa-rcch-6gmj-jf47 <p>The Real Spaces - WordPress Properties Directory Theme theme for WordPress is vulnerable to privilege escalation via the &#39;change_role_member&#39; parameter in all versions up to, and including, 3.5. This is due to a lack of restriction in the profile update role. This makes it possible for unauthenticated attackers to arbitrarily choose their role, including the Administrator role, during a profile update.</p> <p>The Real Spaces - WordPress Properties Directory Theme theme for WordPress is vulnerable to privilege escalation via the &#39;change_role_member&#39; parameter in all versions up to, and including, 3.5. This is due to a lack of restriction in the profile update role. This makes it possible for unauthenticated attackers to arbitrarily choose their role, including the Administrator role, during a profile update.</p> https://cve.radiocsirt.org/vuln/ghsa-rcch-6gmj-jf47