References https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/opal-estate-pro/opal-estate-pro-175-unauthenticated-privilege-escalation-via-on-regiser-user https://www.sentinelone.com/vulnerability-database/cve-2025-6934/ https://github.com/Nxploited/CVE-2025-6934 https://www.cve.org/CVERecord?id=CVE-2025-6934 https://access.redhat.com/security/cve/cve-2025-6934 https://nvd.nist.gov/vuln/detail/CVE-2025-6934 https://patchstack.com/database/wordpress/plugin/opal-estate-pro/vulnerability/wordpress-opal-estate-pro-plugin-1-7-5-unauthenticated-privilege-escalation-via-on-regiser-user-vulnerability https://cve.imfht.com/detail/CVE-2025-6934
Related VulnerabilitiesWordPress Opal Estate Pro /wp-admin/admin-ajax.php 权限绕过漏洞(CVE-2025-6934)Codeastro Real_estate_management_system注入漏洞(CVE-2025-14899)Codeastro Real_estate_management_system注入漏洞(CVE-2025-14897)PoCCVE-2021-24387: WordPress Pro Real Estate 7 Theme <3.1.1 - Cross-Site ScriptingPoCCVE-2022-3933: WordPress Essential Real Estate <3.9.6 - Authenticated Cross-Site ScriptingPoCCVE-2025-2127: JoomlaUX JUX Real Estate 3.4.0 - Reflected XSSPoCCVE-2025-6934: The Opal Estate Pro – Property Management <= 1.7.5 - Unauthenticated Privilege EscalationPoCjoomla-iproperty-xss: Joomla iProperty Real Estate 4.1.1 - Cross-Site ScriptingPoCwp-real-estate-xss: WordPress Real Estate 7 Theme <= 3.3.4 - Cross-Site ScriptingPoCwp-reality-estate-theme: Reality Estate Multipurpose WP-Theme < 2.5.3 - Cross-Site ScriptingCode-Projects Real Estate Property Management System 注入漏洞JoomlaUX JUX Real Estate 代码注入漏洞