CVE-2025-39459
HIGHContempo Themes Real Estate <3.5.2 - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2025-39459. PoCs published by qalesyaSN, RootHarpy, Dit-Developers.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2025-39459, targeting a WordPress vulnerability that allows unauthorized user registration with administrator privileges. The exploit automates the process of creating admin accounts by leveraging a flawed registration mechanism in the target software.
Description
Incorrect Privilege Assignment vulnerability in contempoinc Real Estate 7 realestate-7 allows Privilege Escalation.This issue affects Real Estate 7: from n/a through <= 3.5.2.
Exploits (4)
This repository contains a functional exploit for CVE-2025-39459, targeting a WordPress vulnerability that allows unauthorized user registration with administrator privileges. The exploit automates the process of creating admin accounts by leveraging a flawed registration mechanism in the target software.
This repository contains a Nuclei template designed to detect an unauthenticated privilege escalation vulnerability (CVE-2025-39459) in the Real Estate 7 WordPress Theme. The template automates the process of extracting a nonce and sending a crafted request to exploit the vulnerability, checking for successful administrator registration.
This repository contains a functional exploit for CVE-2025-39459, targeting a WordPress registration vulnerability that allows unauthenticated user creation with administrator privileges. The exploit automates the process of extracting a nonce, crafting a malicious registration request, and verifying success.
The repository contains a functional Python exploit for CVE-2025-39459, targeting a WordPress registration vulnerability to create an administrator account. The exploit automates the process of extracting a nonce, crafting a malicious registration request, and verifying success.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L