Product
The Real Estate Manager Pro plugin for WordPress is vulnerable to privilege escalation via improper capability handling in the allow_attachment_actions function, allowing authenticated attackers to modify administrator accounts.