Privilege Escalation in Resideo Real Estate WordPress Theme Plugin

CVE-2025-7718

What is CVE-2025-7718?

The Resideo Plugin for the Resideo - Real Estate WordPress Theme is susceptible to a privilege escalation flaw, allowing authenticated attackers with Subscriber-level access or higher to exploit insufficient user identity validation. This vulnerability enables the malicious users to modify the email addresses of arbitrary accounts, including those of administrators. By doing so, attackers can reset the affected users' passwords, ultimately gaining unauthorized access to their accounts and potentially compromising sensitive data.

References