The RH – Real Estate WordPress Theme contains a privilege escalation flaw that allows any authenticated user with subscriber permissions or higher to change their own role through the theme’s profile update feature. Specifically, the inspiry_update_profile() function does not restrict the roles that can be set, enabling a user to promote themselves to administrator. The flaw is classified as CWE‑269 and provides an attacker with full administrative capabilities on the WordPress site.

The affected product is the RH – Real Estate WordPress Theme by InspiryThemes. All releases up to and including version 4.4.0 are vulnerable; version 4.4.1 and newer contain a full patch that removes the ability for non-administrative users to change roles via the profile update function.

The vulnerability carries a CVSS score of 8.8, indicating high severity. The EPSS score of 4% suggests a low probability of exploitation at present, and it is not listed in the CISA KEV catalog. The likely attack vector is the theme’s profile update endpoint which is accessible to any logged‑in user. An attacker only needs to be authenticated at subscriber level or higher to elevate their privileges. While no public exploits are reported, the impact of gaining administrator rights warrants prompt remediation.