CVE-2024-13421

CVE-2024-13421 affects the Real Estate 7 WordPress theme for WordPress, up to version 3.5.1. Root cause: the registration flow does not properly restrict which user roles can be assigned, enabling unauthenticated attackers to register a new administrative user account. Impact is privilege escalat...