CVE-2024-32555

Published Jan 21, 2025

Last updated a month ago

CVSS critical 9.8

Overview

Description
Incorrect Privilege Assignment vulnerability in NotFound Easy Real Estate allows Privilege Escalation. This issue affects Easy Real Estate: from n/a through 2.2.6.
Source
audit@patchstack.com
NVD status
Received

Risk scores

CVSS 3.1

Type
Secondary
Base score
9.8
Impact score
5.9
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity
CRITICAL

Weaknesses

audit@patchstack.com
CWE-266

Social media

Hype score
Not currently trending

  1. Popular WordPress Real Estate Theme Vulnerable to Complete Site Takeover, No Patch Protect your WordPress site from security flaws in the Real Homes theme and Easy Real Estate plugin. Learn how to secure your site from CVE-2024-32444 & CVE-2024-32555 https://t.co/A4sSoqFdCH

    @the_yellow_fall

    25 Jan 2025

    193 Impressions

    1 Retweet

    3 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. CVE-2024-32555 alert 🚨 WordPress: Unauthenticated privilege escalation in Easy Real Estate Our customers assets are protected. 🦉 #CyberSecurity #InfoSec #wordpress https://t.co/tzTMZu7DKp

    @Patrowl_io

    23 Jan 2025

    45 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. Critical vulnerabilities in RealHome theme and Easy Real Estate plugins for WordPress allow unauthorized admin access! ⚠️ Over 32,600 sites at risk. CVE-2024-32444 & CVE-2024-32555 remain unpatched. #WordPress #WebSafety #USA link: https://t.co/NDZElOilyE https://t.co/xhhc71

    @TweetThreatNews

    23 Jan 2025

    25 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  4. [CVE-2024-32555: CRITICAL] Incorrect Privilege Assignment vulnerability in NotFound Easy Real Estate allows Privilege Escalation. This issue affects Easy Real Estate: from n/a through 2.2.6.#cybersecurity,#vulnerability https://t.co/zzqmbRqixx https://t.co/BmRCT9CSxb

    @CveFindCom

    21 Jan 2025

    41 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  5. CVE-2024-32555 Incorrect Privilege Assignment vulnerability in NotFound Easy Real Estate allows Privilege Escalation. This issue affects Easy Real Estate: from n/a through 2.2.6. https://t.co/vcE0onh0Rz

    @CVEnew

    21 Jan 2025

    391 Impressions

    0 Retweets

    2 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References