Real Estate Manager Pro Privilege Escalation via user_has_cap Filter ID Collision (CVE-2026-15142)

Vulnerability Overview Vulnerability Name: Real Estate Manager Pro <= 12.8.6 - Authenticated (Subscriber+) Privilege Escalation via 'user_has_cap' Filter ID Collision CVE ID: CVE-2026-15142 CVSS Score: 7.5 (High) Published Date: August 14, 2026 Last Updated Date: August 15, 2026 Researcher: 0x44c5d3 - EnvoraSec Affected Products Software Type: Plugin Software Name: Real Estate Manager Pro Affected Versions: <= 12.8.6 Fixed Version: 12.8.7 Remediation Recommendation: Update to version 12.8.7 or a later patched version Vulnerability Description A privilege escalation vulnerability exists in the Real Estate Manager Pro plugin for WordPress, affecting all versions up to 12.8.6. This vulnerability is caused by improper capability checking when processing media attachment IDs within the function, allowing an attacker to use a target user ID as a media attachment ID for capability checks. When the target user ID matches the ID of an existing media attachment, this enables attackers with subscriber-level access to edit admin accounts and escalate their privileges to administrator level. Reference Links wp-nm.com Other Information Share Options: Facebook, Twitter, LinkedIn, Email Recent Vulnerabilities Real Estate Manager Pro <= 12.8.5 - Reflected Cross-Site Scripting - CVE ID: CVE-2026-57701 - CVSS Score: 6.1 - Researcher: dutafi - Date: July 20, 2026 Real Estate Manager Pro <= 12.8.3 - Unauthenticated Stored Cross-Site Scripting - CVE ID: CVE-2026-57398 - CVSS Score: 7.2 - Researcher: dutafi - Date: July 8, 2026 Real Estate Manager Pro <= 12.7.3 - Reflected Cross-Site Scripting - CVE ID: CVE-2025-54032 - CVSS Score: 6.1 - Researcher: 0x44c5d3 - Date: August 14, 2025 Disclaimer Copyright: 2012-2026 Defiant Inc. License: Subject to Defiant's licensing terms Contact: wfi-support@wordfence.com Other Services Wordfence Intelligence: Provides free personal and commercial API access Wordfence: Install Wordfence for instant notifications Documentation: View documentation on how to access and use the vulnerability database Contact Business Hours: 9am-8pm ET, 6am-5pm PT, and 2pm-1am UTC/GMT (excluding weekends and holidays) Response Time: 24/7 customer support with a 1-hour response time Footer Information Terms of Service: Terms of Service Privacy Policy: Privacy Policy and Notice at Collection Data Sales: Do Not Sell or Share My Personal Information Social Media Facebook: [Icon] Twitter: [Icon] Instagram: [Icon] Products and Support Wordfence Free: Free Version Wordfence Premium: Premium Version Wordfence Care: Maintenance Service Wordfence Response: Response Service Wordfence CLI: Command Line Interface Wordfence Intelligence: Intelligence Service Wordfence Central: Central Service News and Updates Blog: Blog In The News: News Vulnerability Advisories: Vulnerability Advisories About About Wordfence: About Wordfence Affiliate Program: Affiliate Program Employment: Employment Contact: Contact Us Security: Security CVE Request Form: CVE Request Form Subscribe to Updates Subscribe: Subscribe for news and updates Email: [Input Field] Agree to Terms: Checkbox Register Register Button: SIGN UP Copyright Copyright: © 2012-2026 Defiant Inc. All Rights Reserved Other Icons: [Icons] --- The above is a summary of the key information regarding the vulnerability from the webpage screenshot.

Goal Reached Thanks to every supporter — we hit 100%!

Real Estate Manager Pro Privilege Escalation via user_has_cap Filter ID Collision (CVE-2026-15142)

More from this source