CVE-2025-6758

Name of the Vulnerable Software and Affected Versions: Real Spaces - WordPress Properties Directory Theme versions prior to 3.7

Description: The Real Spaces - WordPress Properties Directory Theme for WordPress is susceptible to privilege escalation through the imic agent register function. This issue stems from a lack of restrictions on the registration role, allowing unauthenticated attackers to arbitrarily select their role, including Administrator, during user registration.

Recommendations: Real Spaces - WordPress Properties Directory Theme versions prior to 3.7: Upgrade to version 3.7 or later to address the unrestricted registration role issue and prevent privilege escalation. As a temporary workaround, consider restricting access to the imic agent register function until a patch is available.