CVE-2025-4601

Name of the Vulnerable Software and Affected Versions RH - Real Estate WordPress Theme versions prior to 4.4.1

Description The issue is related to privilege escalation due to the theme not properly restricting user roles that can be updated as part of the inspiry update profile() function. This allows authenticated attackers with subscriber-level access and above to set their role to that of an administrator.

Recommendations For versions prior to 4.4.1, update to version 4.4.1 to fully patch the vulnerability. As a temporary workaround, consider restricting access to the inspiry update profile() function until the issue is resolved.