Vulnerability report

CVE-2025-4601

RH - Real Estate WordPress Theme <= 4.4.0 Authenticated Privilege Escalation

InspiryThemes / RH - Real Estate WordPress Theme · * to <= 4.4.0

Watch CVE-2025-4601 Browse KEV feed
Severity
CVSS 8.8 · High
Confidence
—
Exploit status
—
EPSS
4.2%
First observed
—
Last observed
—

Decision summary

What security teams need to know first

Direct answers before the deeper technical record.

What it is

CVE-2025-4601 is a vulnerability affecting InspiryThemes RH - Real Estate WordPress Theme. The "RH - Real Estate WordPress Theme" theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and...

Have exploitation attempts been observed?

No. Previdian has not recorded exploitation attempts for this vulnerability yet.

Who is affected?

InspiryThemes / RH - Real Estate WordPress Theme * to <= 4.4.0.

What should we do?

Track for updates. Assess relevance to your asset inventory and enrichment workflows.

Overview

RH - Real Estate WordPress Theme <= 4.4.0 Authenticated Privilege Escalation

The "RH - Real Estate WordPress Theme" theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.4.0. This is due to the theme not properly restricting user roles that can be updated as part of the inspiry_update_profile() function.

This makes it possible for authenticated attackers, with subscriber-level access and above, to set their role to that of an administrator. The vulnerability was partially patched in version 4.4.0, and fully patched in version 4.4.1.

InspiryThemes Affected
RH - Real Estate WordPress Theme
Through 4.4.0
Published
10 Jun 2025
Exploitation date
—
Attack vector
Remote
Complexity
Low
Privileges
Low
User interaction
None

Tags

wordpress

CVE References

Exploitation evidence

Exploitation evidence for this CVE

Catalogues and sources that list this CVE as a known exploited vulnerability, when available.

No exploitation evidence rows are recorded for this CVE yet.

Detection

Operational artifacts and observed signals

Make the evidence actionable in scanner, SOC, and edge-control workflows.

Scanner coverage

No scanner integrations recorded yet.

Virtual patch status

No Previdian virtual patch is currently available. Future rules ship for ModSecurity, Cloudflare, and AWS WAF.

Learn about virtual patches →

No detection artifacts or sensor request patterns are available for this CVE yet.

Check back as sensor telemetry and scanner integrations are updated.

Risk and context

Severity, weaknesses, and research context

CVSS v3.1

8.8 High

Potential damage if exploited. Separate from whether attackers are using it.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

4.2%

Estimated chance of exploitation in the next 30 days. Previdian's warning comes from evidence, not this score.

Weaknesses

Improper Privilege Management CWE-269

Recent mention · Daily CyberSecurity

Active Gravity SMTP Vulnerability Exploited in the Wild

A critical Gravity SMTP vulnerability is currently facing active exploitation in the wild. Consequently, WordPress site administrators must The post Active Gravity SMTP Vulnerability Exploited in the Wild appeared first on Daily CyberSecurity. Related posts: CVE-2025-4601:...

Read full advisory

Timeline

From disclosure to today

  1. 03:41 UTC

    CVE published

    Vulnerability disclosed publicly

  2. 17:44 UTC

    CVE ID reserved

    Identifier reserved by the CNA

Pro API

Automate this intelligence

Confidence, exploit status, sensor telemetry, PoCs, scanner integrations, mentions, and tags are available programmatically for VM, SOC, and CTI workflows.

Start 14-day Pro trial Read API docs
  • Evidence confidence and provenance
  • First-party sensor telemetry
  • PoC and scanner references
  • Affected versions and enrichment
  • Automation-ready JSON delivery

GET /api/v2/pro/kevs/CVE-2025-4601

Sample API response 
{
  "cve_id": "CVE-2025-4601",
  "confidence": null,
  "cvss_score": 8.8,
  "cvss_estimated": false,
  "epss_score": 0.04167,
  "exploit_status": {
    "exploited_in_the_wild": false,
    "active_exploitation_observed": false
  },
  "sensor_telemetry": { "attempts": 0, "sensors": 0 }
}