Skip to content
OpenAdvisories

Vendor

pixel_prime

4 known vulnerabilities.

Products

Reales WP STPT 2 Resideo Plugin for Resideo - Real Estate WordPress Theme 1 Reales WP - Real Estate WordPress Theme 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-7718

    Resideo Plugin for Resideo - Real Estate WordPress Theme <= 2.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Privilege Escalation via Account Takeover

    The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.5.4. This is due to the plugin not properly validating a user's identity prior…

    pixel_prime Resideo Plugin for Resideo - Real Estate WordPress Theme Web / CMS
  • High 8.8
    CVE-2025-3610

    Reales WP STPT <= 2.1.2 - Authenticated (Subscriber+) Privilege Escalation via Password Update

    The Reales WP STPT plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.1.2. This is due to the plugin not properly validating a user's identity prior to updating their details like password. …

    pixel_prime Reales WP STPT Web / CMS