pixel_prime
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Reales WP STPT | 2 | – | May 6, 2025 |
| Reales WP - Real Estate WordPress Theme | 1 | – | Apr 24, 2025 |
| Resideo Plugin for Resideo - Real Estate WordPress Theme | 1 | – | Sep 10, 2025 |
Exploited and recent CVEs
- CVE-2025-7718 Resideo Plugin for Resideo - Real Estate WordPress Theme <= 2.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Privilege Escalation via Account Takeover 0.3%
- CVE-2025-3609 Reales WP STPT <= 2.1.2 - Unauthorized User Registration 0.3%
- CVE-2025-3610 Reales WP STPT <= 2.1.2 - Authenticated (Subscriber+) Privilege Escalation via Password Update 0.6%
- CVE-2024-13307 Reales WP - Real Estate WordPress Theme <= 2.1.2 - Missing Authorization to Unauthenticated Attachment Deletion and Favorite Property Updates 0.3%