CVE-2026-10782
RealHomes Memberships <= 3.0.9 - Missing Authorization to Authenticated (Subscriber+) Membership Payment Bypass via 'ims_add_paypal_recurring_membership' AJAX Action
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
The RealHomes Memberships plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.0.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to grant themselves any premium membership tier without completing a PayPal transaction, generating a falsified active payment receipt and gaining unauthorized access to restricted property listing allowances.
| CWE | CWE-862 |
| Vendor | inspirythemes |
| Product | realhomes memberships |
| Published | Aug 1, 2026 |
Stay Ahead of the Next One
Get instant alerts for inspirythemes realhomes memberships
Be the first to know when new medium vulnerabilities affecting inspirythemes realhomes memberships are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
inspirythemes / RealHomes Memberships
0 ≤ 3.0.9
References
wordfence.com: https://www.wordfence.com/threat-intel/vulnerabilities/id/16187b39-9b3a-4b1c-806c-37b62483a719?source=cve plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/inspiry-memberships/tags/3.0.9/resources/payment-handler/class-paypal-payment-handler.php#L364 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/inspiry-memberships/tags/3.0.9/resources/payment-handler/class-paypal-payment-handler.php#L351 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/inspiry-memberships/tags/3.0.9/resources/payment-handler/payment-handler-init.php#L82 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/inspiry-memberships/tags/3.0.7/resources/payment-handler/class-paypal-payment-handler.php#L364 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/inspiry-memberships/tags/3.0.7/resources/payment-handler/class-paypal-payment-handler.php#L351 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/inspiry-memberships/tags/3.0.7/resources/payment-handler/payment-handler-init.php#L82 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/changeset?reponame=&old=3617226%40inspiry-memberships&new=3617226%40inspiry-memberships
Credits
dyingman