Privilege Escalation Vulnerability in Opal Estate Pro Plugin for WordPress
CVE-2025-6934
9.8CRITICAL
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 1 July 2025
What is CVE-2025-6934?
The Opal Estate Pro – Property Management and Submission plugin for WordPress is susceptible to privilege escalation. This is a result of improper role restriction during user registration in the 'on_register_user' function. Attackers without authentication can exploit this vulnerability to assign themselves any role, including administrative privileges, potentially compromising the security and integrity of the WordPress site.
Affected Version(s)
Opal Estate Pro – Property Management and Submission * <= 1.7.5