Realteo Real Estate Plugin Authentication Bypass Vulnerability in WordPress

A vulnerability allowing authentication bypass has been identified in the Realteo - Real Estate Plugin by Purethemes for WordPress, affecting all versions through 1.2.8. The issue arises from inadequate role restrictions in the 'do_register_user' function, enabling unauthenticated attackers to register accounts with Administrator privileges.

Impact

Exploitation of this vulnerability allows unauthenticated users to gain Administrator roles, potentially leading to unauthorized access and control over the WordPress site.

Remediation

Users are advised to update the Realteo - Real Estate Plugin by Purethemes to version 1.2.9 or a newer patched version.