https://blog.qife122.com/tags/cve-2025-6758/ Recent content in CVE-2025-6758 on 办公AI智能小助手 Hugo zh-cn qife Fri, 24 Oct 2025 14:50:40 +0800 https://blog.qife122.com/p/cve-2025-6758%E6%BC%8F%E6%B4%9E%E5%88%A9%E7%94%A8%E5%88%86%E6%9E%90wordpress%E4%B8%BB%E9%A2%98%E6%9C%AA%E6%8E%88%E6%9D%83%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87%E6%BC%8F%E6%B4%9E/ Fri, 24 Oct 2025 14:50:40 +0800 https://blog.qife122.com/p/cve-2025-6758%E6%BC%8F%E6%B4%9E%E5%88%A9%E7%94%A8%E5%88%86%E6%9E%90wordpress%E4%B8%BB%E9%A2%98%E6%9C%AA%E6%8E%88%E6%9D%83%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87%E6%BC%8F%E6%B4%9E/ <h2 id="-cve-2025-6758漏洞利用">💀 CVE-2025-6758漏洞利用</h2> <p><strong>SPLOITUS</strong></p> <h3 id="exploit-for-cve-2025-6758">Exploit for CVE-2025-6758</h3> <p>2025-10-22 | CVSS 9.8</p> <h2><a href="https://sploitus.com/exploit?id=973A9504-EDEA-5475-AED6-4FC55CDEF78A">https://sploitus.com/exploit?id=973A9504-EDEA-5475-AED6-4FC55CDEF78A</a></h2> <h2 id="real-spaces---wordpress-properties-directory-theme--36">Real Spaces - WordPress Properties Directory Theme ≤ 3.6</h2> <h3 id="通过imic_agent_register实现未授权权限提升至管理员">通过<code>imic_agent_register</code>实现未授权权限提升至管理员</h3> <hr> <h2 id="-漏洞描述">📝 漏洞描述</h2> <p><strong>CVE-2025-6758</strong><br> <strong>CVSS评分：</strong> 9.8（严重）</p> <p><strong>Real Spaces - WordPress Properties Directory Theme</strong> 在3.6及之前的所有版本中存在通过<code>imic_agent_register</code>函数实现的权限提升漏洞。 该漏洞源于注册过程中对角色分配的限制不足，允许未授权攻击者在注册新用户时任意指定其角色，包括<code>Administrator</code>。</p>