What is CVE-2024-13421?

CVE-2024-13421 is a critical-severity vulnerability in Contempoinc Real Estate 7 Wordpress, classified under Incorrect Privilege Assignment. CVSS score: 9.8/10. Published 2025-02-12.

How severe is CVE-2024-13421?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Is CVE-2024-13421 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Privilege escalation in Contempoinc Real Estate 7 Wordpress

CVE-2024-13421

The Real Estate 7 WordPress theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.1. This is due to the plugin not properly restricting the roles allowed to be selected during registration. Thi…

EPSS: 0.007 (49.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Contempoinc Real Estate 7 Wordpress — versions 0
Contempothemes Real_estate_7

Weakness classification (CWE)

CWE-266 — Incorrect Privilege Assignment

Public proof-of-concept exploits

References

security@wordfence.com (Third Party Advisory)
security@wordfence.com (Product)
security@wordfence.com (Release Notes)

Frequently asked questions

What is CVE-2024-13421?: CVE-2024-13421 is a critical-severity vulnerability in Contempoinc Real Estate 7 Wordpress, classified under Incorrect Privilege Assignment. CVSS score: 9.8/10. Published 2025-02-12.
How severe is CVE-2024-13421?: Critical severity. CVSS v3 base score is 9.8 out of 10.
Is CVE-2024-13421 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.