Skip to content
OpenAdvisories

Vendor

imithemes

16 known vulnerabilities.

Products

Eventer - WordPress Event & Booking Manager Plugin 6 Eventer 4 Real Spaces - WordPress Properties Directory Theme 2 NativeChurch 2 IMITHEMES Listing 1 Gaea 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-6758 Public exploit

    Real Spaces - WordPress Properties Directory Theme <= 3.6 - Unauthenticated Privilege Escalation to Administrator via 'imic_agent_register'

    The Real Spaces - WordPress Properties Directory Theme theme for WordPress is vulnerable to privilege escalation via the 'imic_agent_register' function in all versions up to, and including, 3.6. This is due to a lack of restriction in the registration role. T…

    imithemes Real Spaces - WordPress Properties Directory Theme Web / CMS
  • Critical 9.3
    CVE-2025-39481

    WordPress Eventer plugin < 3.11.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in imithemes Eventer eventer allows Blind SQL Injection.This issue affects Eventer: from n/a through < 3.11.4.

    imithemes Eventer
  • Critical 9.8
    CVE-2025-2253

    IMITHEMES Listing <= 3.3 - Unauthenticated Privilege Escalation via Unverified Password Reset

    The IMITHEMES Listing plugin is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.3. This is due to the plugin not properly validating a verification code value prior to updating their password through the imic_re…

    imithemes IMITHEMES Listing