Not scored
CVE-2025-67968
WordPress Real Homes CRM plugin <= 1.0.0 - Arbitrary File Upload vulnerability
InspiryThemesReal Homes CRM
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 25 Oct
0.6%probability of exploitation in the next 30 days
Higher than 47% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
Unrestricted Upload of File with Dangerous Type vulnerability in InspiryThemes Real Homes CRM realhomes-crm allows Using Malicious Files.This issue affects Real Homes CRM: from n/a through <= 1.0.0.
Coverage 1 article · 1 outlet
- CVE-2025-67968 (CVSS 9.9): Critical Flaw in Real Estate Theme Exposes 30,000 Sites to TakeoverSecurityOnline · first in our coverage