CVE-2025-1515Disclosure

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The WP Real Estate Manager plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.8. This is due to insufficient identity verification on the LinkedIn login request process. This makes it possible for unauthenticated attackers to bypass official authentication and log in as any user on the site, including administrators.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-288

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://www.valtersit.com/cve/CVE-2025-1515/

Full discourse1 post

Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters137d
Disclosure
CVE-2025-1515 - Critical authentication bypass in WP Real Estate Manager plugin. CVSS 9.8. Unauthenticated attackers can log in as any user, including admins. Disable plugin immediately. #CVE #WordPress #infosec #CVEAlert #POC #CyberSecurity HUB: https://www.valtersit.com/cve/CVE-2025-1515/
Post summary
This post announces a critical authentication bypass vulnerability (CVE‑2025‑1515) in the WP Real Estate Manager plugin, giving its CVSS score, detailing the issue, and urging users to disable the plugin.
00000104
904 followersView on X

Explore more

Back to dashboard