CVE-2025-22645

WordPress Real Estate Manager plugin <= 7.3 - Captcha Bypass Vulnerability vulnerability

5.3 Medium

Improper Restriction of Excessive Authentication Attempts vulnerability in Rameez Iqbal Real Estate Manager real-estate-manager allows Password Brute Forcing.This issue affects Real Estate Manager: from n/a through <= 7.3.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: Low
Availability: None

Exploit likelihood

0.34%Up 0.3 points since Feb 19, 2025

What each source reports

CVE List Score used 5.3

WordPress Real Estate Manager plugin <= 7.3 - Captcha Bypass Vulnerability vulnerability

Record: CVE-2025-22645
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-307
Updated: 2026-11-02

EUVDEUVD-2025-4781 5.3

Record: EUVD-2025-4781
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-8rf3-52xm-w6jc 5.3

Improper Restriction of Excessive Authentication Attempts vulnerability in Rameez Iqbal Real...

Improper Restriction of Excessive Authentication Attempts vulnerability in Rameez Iqbal Real Estate Manager allows Password Brute Forcing. This issue affects Real Estate Manager: from n/a through 7.3.

Record: GHSA-8rf3-52xm-w6jc
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-307
Updated: 2026-11-02

NVD 5.3

Record: CVE-2025-22645
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-307
Updated: 2026-11-02

Affected products

rameez iqbal real estate manager

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-22645 is a medium vulnerability (CVSS 5.3) in Rameez Iqbal Real Estate Manager, published February 18, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. No source names a fixed version.