Homlisti
Monthly
Broken Access Control in the Homlisti WordPress real estate theme (versions ≤ 3.1.2) allows authenticated subscribers to perform unauthorized write operations that should be restricted to higher-privileged roles. The CVSS vector (PR:L, I:H, AC:L) confirms low-privileged network-accessible exploitation with high integrity impact and no complexity barrier once a subscriber account is held. No public exploit identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Broken Access Control in the Homlisti WordPress real estate theme (versions ≤ 3.1.2) allows authenticated subscribers to perform unauthorized write operations that should be restricted to higher-privileged roles. The CVSS vector (PR:L, I:H, AC:L) confirms low-privileged network-accessible exploitation with high integrity impact and no complexity barrier once a subscriber account is held. No public exploit identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.