Critical · published March 14, 2025
🚨 Oops! An unauthenticated attacker can roll right up and register as an Administrator in the Realteo plugin for WordPress – no password required! 🔥 This vulnerability is like a hotel allowing anyone to check in as the manager without verifying their identity. Just like a rogue guest could run amok with the hotel’s operations, an attacker could gain full access to your site! With this authentication bypass, an attacker could register an account with full Administrator privileges. This means they could modify content, install malicious plugins, steal sensitive data, or even take your entire website hostage. It's an absolute nightmare waiting to happen!
This vulnerability is like a hotel allowing anyone to check in as the manager without verifying their identity. Just like a rogue guest could run amok with the hotel’s operations, an attacker could gain full access to your site! The vulnerability stems from insufficient role restrictions in the 'do_register_user' function of the Realteo plugin, allowing unauthenticated users to create accounts with the Administrator role.
With this authentication bypass, an attacker could register an account with full Administrator privileges. This means they could modify content, install malicious plugins, steal sensitive data, or even take your entire website hostage. It's an absolute nightmare waiting to happen! Immediately update the Realteo plugin to version 1.2.9 or higher to close this critical security hole. Review user accounts to ensure no unauthorized access has occurred, and consider implementing additional security measures like two-factor authentication for all administrative logins. You've got this! Follow these steps, and your website will be safe and sound in no time! 🛡️