Privilege Escalation Vulnerability in Real Spaces WordPress Theme

CVE-2025-8218

What is CVE-2025-8218?

The Real Spaces - WordPress Properties Directory Theme contains a vulnerability that allows unauthenticated users to exploit the 'change_role_member' parameter. This flaw permits attackers to elevate their user role without proper restrictions during profile updates. As a result, they could gain unauthorized administrative access, compromising the integrity and security of the website. All versions up to and including 3.5 are affected, making it crucial for users to update and secure their installations to prevent exploitation.

References