CVE-2025-6934

CVE-2025-6934 – Exploit de Opal Estate Pro para WordPress 📖 Descripción Este repositorio contiene un Proof of Concept PoC exploit para CVE-2025-6934 , una vulnerabilidad crítica en el Plugin de WordPress: Opal Estate Pro = 1.7.5, que permite la creación de cuenta de administrador sin autenticació...

The Opal Estate Pro – Property Management <= 1.7.5 - Unauthenticated Privilege Escalation

The Opal Estate Pro plugin ≤ 1.7.5 is vulnerable to privilege escalation. Due to missing role restrictions in the onregisteruser function, users can register with any role. This allows unauthenticated attackers to create administrator accounts. id: CVE-2025-6934 info: name: The Opal Estate Pro –...

JoomlaUX JUX Real Estate 3.4.0 - Reflected XSS

A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla. It has been classified as problematic. Affected is an unknown function of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties. The manipulation of the argument Itemid/jpyearbuilt leads to cross...

WordPress Essential Real Estate <3.9.6 - Authenticated Cross-Site Scripting

WordPress Essential Real Estate plugin before 3.9.6 contains an authenticated cross-site scripting vulnerability. The plugin does not sanitize and escape some parameters, which can allow someone with a role as low as admin to inject arbitrary script in the browser of an unsuspecting user in the...

CVE-2025-6934

CVE-2025-6934 – WordPress Opal Estate Pro Exploit 📖 Description This repository contains a Proof of Concept PoC exploit for CVE-2025-6934 , a critical vulnerability in the WordPress Plugin: Opal Estate Pro = 1.7.5, which allows creating an administrator account without authentication. ⚠️ Disclaime...

CVE-2025-6934

🛡️ CVE-2025-6934 - Escalada de Privilegios no Autenticada en Opal Estate Pro 📝 Descripción El plugin Opal Estate Pro – Property Management and Submission para WordPress, utilizado por el FullHouse - Real Estate Responsive WordPress Theme , es vulnerable a Escalada de Privilegios en todas las...

WP-CVE-2025-6934

WP-CVE-2025-6934 | Opal Estate Pro = 1.7.5 - Escalada de privilegios no autenticada Este es un script en Python que explota la vulnerabilidad CVE-2025-6934 en el plugin Opal Estate Pro = 1.7.5 para WordPress. Esta herramienta permite a atacantes no autenticados registrar nuevos usuarios y escalar...

CVE-2026-13714

CVE-2026-13714 Realtyna Organic IDX plugin + WPL Real Estate │ │ ├─ privatekey = │ │ ├─ cmd = setproperty │...

CVE-2026-14483

...

CVE-2025-6934

CVE-2025-6934 escalation non autenticata dei privilegi in Opal Estate Pro Descrizione CVE-2025-6934 è una vulnerabilità critica nel plugin WordPress Opal Estate Pro ≤ v1.7.5. Questo bug consente a un attaccante non autenticato di creare un nuovo account amministratore inviando una richiesta...

CVE-2025-39459

CVE-2025-39459 Real Estate 7 = 3.5.2 - Escalation di privilegi senza autenticazione 🧨 CVE-2025-39459 — Real Estate 7 = 3.5.2 Escalation di privilegi senza autenticazione 📌 Panoramica Questo repository contiene un tool proof-of-concept in Python per CVE-2025-39459 , che colpisce il tema WordPress...

CVE-2025-39459-Nuclei-Template

📄 Template Nuclei per CVE-2025-39459 🚀 Panoramica Questo repository contiene un template Nuclei progettato specificamente per rilevare una Vulnerabilità di Escalation dei Privilegi non Autenticata CVE-2025-39459 nel tema WordPress Real Estate 7. Questo problema consente ad attaccanti non...

CVE-2025-6934

CVE-2025-6934 Exploit Automático ⚡ Visão Geral CVE-2025-6934 é um exploit de prova de conceito PoC que visa o Plugin WordPress: Opal Estate Pro ≤ 1.7.5. Este exploit demonstra a criação de conta de administrador sem autenticação. Aviso: Este PoC é apenas para fins educacionais. Não use em sistema...

CVE-2025-6934

CVE-2025-6934 🛡️ CVE-2025-6934 - Nicht authentifizierte Privilegienerweiterung in Opal Estate Pro 📝 Beschreibung Das Opal Estate Pro – Property Management and Submission Plugin für WordPress, verwendet im FullHouse - Real Estate Responsive WordPress Theme, ist anfällig für Privilegienerweiterung i...

CVE-2025-6934-PoC

🔓 CVE-2025-6934 Exploit-Tool Erstellung nicht authentifizierter Administratorkonten im WordPress-Plugin Opal Estate Pro Vollständig erstellt und entwickelt von mejbankadir SMH tech and Mejban HackSheild Under NexoAmicus 📋 Beschreibung CVE-2025-6934 ist eine kritische Schwachstelle im...

CVE-2025-39459

CVE-2025-39459 Real Estate 7 = 3.5.2 – Nicht authentifizierte Privilegienausweitung 🧨 CVE-2025-39459 – Real Estate 7 = 3.5.2 Nicht authentifizierte Privilegienausweitung 📌 Überblick Dieses Repository enthält ein Python-Proof-of-Concept-Tool für CVE-2025-39459 , das das Real Estate 7 WordPress-The...

What happens to your data when you die? (Lock and Code S07E17)

This week on the Lock and Code podcast … You will die. Your data will not. The afterlife of our information is a recent phenomenon, and some of the companies with the most to sort through are still just figuring it out. As far back as 2007, Facebook was forced to reckon with mass grief when users...

CVE-2026-78244

A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipulation of the argument search/deliverytype/searchprice/propertytype results in sql injection. The attack may be initiated...

CVE-2026-78244

A SQL injection vulnerability exists in itsourcecode Real Estate Management System 1.0 , specifically in the file search.php . Manipulating the arguments search, delivery_type, search_price, or property_type allows an unauthenticated remote attacker to inject SQL, with no user interaction require...

CVE-2026-78244 itsourcecode Real Estate Management System search.php sql injection

A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipulation of the argument search/deliverytype/searchprice/propertytype results in sql injection. The attack may be initiated...