CVE-2026-15142
Real Estate Manager Pro <= 12.8.6 - Authenticated (Subscriber+) Privilege Escalation via 'user_has_cap' Filter ID Collision
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
The Real Estate Manager Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 12.8.6. This is due to improper capability handling in the allow_attachment_actions() function, which can treat a target user ID as a media attachment ID during user capability checks. This makes it possible for authenticated attackers, with Subscriber-level access and above, to edit an administrator account and escalate their privileges to Administrator when the targeted user ID matches the ID of an existing media attachment.
| CWE | CWE-269 |
| Vendor | webcodingplace |
| Product | real estate manager pro |
| Published | Aug 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for webcodingplace real estate manager pro
Be the first to know when new high vulnerabilities affecting webcodingplace real estate manager pro are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
WebCodingPlace / Real Estate Manager Pro
0 ≤ 12.8.6
References
Credits
0xd4rk5id3