Skip to content
OpenAdvisories

Vendor

pixel_prime

4 known vulnerabilities.

Products

Reales WP STPT 2 Resideo Plugin for Resideo - Real Estate WordPress Theme 1 Reales WP - Real Estate WordPress Theme 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-3609

    Reales WP STPT <= 2.1.2 - Unauthorized User Registration

    The Reales WP STPT plugin for WordPress is vulnerable to unauthorized user registration in all versions up to, and including, 2.1.2. This is due to the 'reales_user_signup_form' AJAX action not verifying if user registration is enabled, prior to registering a…

    pixel_prime Reales WP STPT Web / CMS
  • Medium 5.3
    CVE-2024-13307

    Reales WP - Real Estate WordPress Theme <= 2.1.2 - Missing Authorization to Unauthenticated Attachment Deletion and Favorite Property Updates

    The Reales WP - Real Estate WordPress Theme theme for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'reales_delete_file', 'reales_delete_file_plans', 'reales_add_to_favourites', and 'reales_remo…

    pixel_prime Reales WP - Real Estate WordPress Theme Web / CMS