CVE-2025-2891

creationtimestamp| type| source ---|---|--- 2025-04-01 07:32:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9860 2025-04-01 09:48:06+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114262074055767061 2025-04-01 09:48:06+00:00| seen|...

CVE-2025-2891 WP Pro Real Estate 7 <= 3.5.4 - Authenticated (Custom) Arbitrary File Upload

The Real Estate 7 WordPress theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'template-submit-listing.php' file in all versions up to, and including, 3.5.4. This makes it possible for authenticated attackers, with Seller-level access and abov...

CVE-2025-2891 WP Pro Real Estate 7 <= 3.5.4 - Authenticated (Custom) Arbitrary File Upload

The Real Estate 7 WordPress theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'template-submit-listing.php' file in all versions up to, and including, 3.5.4. This makes it possible for authenticated attackers, with Seller-level access and abov...

CVE-2025-2891

CVE-2025-2891 – Real Estate 7 WordPress Theme : The vulnerability is in the Real Estate 7 WordPress Theme for WordPress, allowing authenticated attackers with Seller-level access (and above) to upload arbitrary files due to missing file type validation in template-submit-listing.php. Affected ver...