CVE-2025-7718

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-7718", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-07-16T14:56:48.330Z", "datePublished": "2025-09-10T12:25:30.026Z", "dateUpdated": "2026-04-08T17:33:55.679Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:33:55.679Z"}, "affected": [{"vendor": "pixel_prime", "product": "Resideo Plugin for Resideo - Real Estate WordPress Theme", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.5.4", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.5.4. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account."}], "title": "Resideo Plugin for Resideo - Real Estate WordPress Theme <= 2.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Privilege Escalation via Account Takeover", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f8375ecf-e64b-4649-9341-fa45bf5556c3?source=cve"}, {"url": "https://themeforest.net/item/resideo-real-estate-wordpress-theme/27791406"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-639 Authorization Bypass Through User-Controlled Key", "cweId": "CWE-639", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH"}}], "credits": [{"lang": "en", "type": "finder", "value": "Alyudin Nafiie"}], "timeline": [{"time": "2025-09-09T17:42:34.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-09-10T14:06:31.611596Z", "id": "CVE-2025-7718", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-10T14:06:50.678Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-7718", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-09-10T14:06:31.611596Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-10T14:06:41.174Z"}}], "cna": {"title": "Resideo Plugin for Resideo - Real Estate WordPress Theme <= 2.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Privilege Escalation via Account Takeover", "credits": [{"lang": "en", "type": "finder", "value": "Alyudin Nafiie"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "pixel_prime", "product": "Resideo Plugin for Resideo - Real Estate WordPress Theme", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "2.5.4"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-09-09T17:42:34.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f8375ecf-e64b-4649-9341-fa45bf5556c3?source=cve"}, {"url": "https://themeforest.net/item/resideo-real-estate-wordpress-theme/27791406"}], "descriptions": [{"lang": "en", "value": "The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.5.4. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-639", "description": "CWE-639 Authorization Bypass Through User-Controlled Key"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:33:55.679Z"}}}, "cveMetadata": {"cveId": "CVE-2025-7718", "state": "PUBLISHED", "dateUpdated": "2026-04-08T17:33:55.679Z", "dateReserved": "2025-07-16T14:56:48.330Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-09-10T12:25:30.026Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Resideo Plugin for Resideo - Real Estate WordPress Theme", "vendor": "pixel_prime", "versions": [{"lessThanOrEqual": "2.5.4", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.5.4. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account."}, {"lang": "es", "value": "El plugin Resideo Plugin for Resideo - Real Estate WordPress Theme para WordPress es vulnerable a escalada de privilegios mediante toma de control de cuenta en todas las versiones hasta la 2.5.4, inclusive. Esto se debe a que el plugin no valida correctamente la identidad de un usuario antes de actualizar sus detalles como el correo electr\u00f3nico. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, cambien las direcciones de correo electr\u00f3nico de usuarios arbitrarios, incluidos los administradores, y aprovechen eso para restablecer la contrase\u00f1a del usuario y obtener acceso a su cuenta."}], "id": "CVE-2025-7718", "lastModified": "2026-09-26T00:10:00.127", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-7718", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-09-10T14:06:31.611596Z", "version": "2.0.3"}}]}, "published": "2025-09-10T13:15:37.040", "references": [{"source": "security@wordfence.com", "url": "https://themeforest.net/item/resideo-real-estate-wordpress-theme/27791406"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f8375ecf-e64b-4649-9341-fa45bf5556c3?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-639"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-20T19:40:11.059258+00:00", "value": {"mitigation_remediation": ["Update Resideo Plugin for Resideo - Real Estate WordPress Theme to a version newer than 2.5.4.", "Reset passwords for all administrator and high-privilege accounts immediately after applying the patch.", "If an update cannot be applied immediately, temporarily revoke Subscriber-level users\u2019 ability to edit account details or enforce stricter role permissions until the patch is installed."], "summary": {"action": "Immediate Patch", "impact": "Privilege Escalation"}, "threat_synthesis": {"affected_systems": "All installs of the Resideo Plugin for Resideo - Real Estate WordPress Theme version 2.5.4 and earlier are impacted.", "description_and_impact": "The Resideo Plugin for Resideo - Real Estate WordPress Theme is vulnerable to privilege escalation via account takeover. Users with Subscriber-level access or higher can exploit a lack of identity validation when updating account details, allowing an attacker to change any user\u2019s email address, including administrators, and then reset the account password to gain unauthorized access.", "risk_and_exploitability": "The CVSS score of 8.8 classifies this as high severity. The EPSS score of less than 1% indicates a low probability of exploitation; however, the vulnerability is not listed in CISA KEV. An attacker must be authenticated as a Subscriber or higher, after which the exploit can be executed by editing another user\u2019s email. Because the attack path requires legitimate access, the risk is focused on insider or compromised accounts rather than public-facing vectors."}}}}, "created": "2025-09-12T09:11:30.033558+00:00", "updated": "2026-04-20T19:45:15.510084+00:00", "vendors": ["pixel_prime", "pixel_prime$PRODUCT$resideo_plugin", "wordpress", "wordpress$PRODUCT$wordpress"]}