Themes Vulnerabilities
Real Estate Papi <= 1.0.5 - Subscriber+ Plugin Installation
Description
The theme does not perform capability or CSRF checks on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to install a fixed set of companion plugins from the WordPress.org repository. Where the request runs in the session of a user who can activate plugins, those plugins are activated as well.
Proof of Concept
Affects Themes
No known fix References
CVE
Classification
Type
NO AUTHORISATION
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Huynh Kien Minh
Submitter
Huynh Kien Minh
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2026-09-03 (about 3 days ago)
Added
2026-08-27 (about 10 days ago)
Last Updated
2026-08-27 (about 10 days ago)
WPScan 