CVE-2024-32444

EPSS 0.13%
Veröffentlicht 03.09.2025 06:55:35
Zuletzt bearbeitet 01.04.2026 16:17:02
Quelle audit@patchstack.com
CVE-Watchlists
Login
Unerledigt
Login

RealHomes <= 4.3.6 - Unauthenticated Privilege Escalation

Incorrect Privilege Assignment vulnerability in InspiryThemes RealHomes realhomes allows Privilege Escalation.This issue affects RealHomes: from n/a through <= 4.3.6.

Mögliche Gegenmaßnahme

RH - Real Estate WordPress Theme: Update to version 4.3.7, or a newer patched version

Betroffene Produkte Warnungen 0 Metriken 1 CWE 1 Referenzen 5

Weitere Schwachstelleninformationen

SystemWordPress Theme

≫

Produkt RH - Real Estate WordPress Theme

Version *-4.3.6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Inspirythemes ≫ Realhomes SwPlatformwordpress Version < 4.3.7

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.13%	0.326

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String

CWE-266 Incorrect Privilege Assignment

A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

https://patchstack.com/database/Wordpress/Theme/realhomes/vulnerability/wordpress-real-homes-plugin-4-3-6-privilege-escalation-vulnerability?_s_id=cve

Third Party Advisory

https://www.wordfence.com/threat-intel/vulnerabilities/id/1540bf3e-2928-476c-8e5b-241b80dd699f

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-32444

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-32444

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-32444

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-32444