Lucene search
K

17 matches found

EUVD
EUVD
added 2025/12/09 6:30 p.m.3 views

EUVD-2025-202081

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam Rehub rehub-theme allows Retrieve Embedded Sensitive Data.This issue affects Rehub: from n/a through = 19.9.9.1...

5.3CVSS6.4AI score0.00037EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/09 2:14 p.m.1 views

CVE-2025-67565 WordPress Rehub theme <= 19.9.9.1 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam Rehub rehub-theme allows Retrieve Embedded Sensitive Data.This issue affects Rehub: from n/a through = 19.9.9.1...

5.3CVSS6.5AI score0.00037EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.3 views

PT-2025-49939

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam Rehub rehub-theme allows Retrieve Embedded Sensitive Data.This issue affects Rehub: from n/a through = 19.9.9.1...

5.3CVSS6.9AI score0.00037EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/12/06 4:21 p.m.4 views

WordPress Rehub theme <= 19.9.9.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Theme Rehub versions = 19.9.9.1...

5.3CVSS7AI score0.00037EPSS
Exploits0Affected Software1
CVE
CVE
added 2025/10/29 8:38 a.m.14 views

CVE-2025-64197

CVE-2025-64197 concerns the WordPress theme REHub. The vulnerability is a Stored XSS caused by improper input neutralization during web page generation, affecting Rehub-theme versions before 19.9.9.1 (reported by Red Hat, NVD, ENISA EUVD, CVE lists, and Patchstack). The Red Hat and NVD entries de...

6.5CVSS5.6AI score0.0003EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/29 12:0 a.m.4 views

PT-2025-44243

Name of the Vulnerable Software and Affected Versions sizam Rehub rehub-theme versions prior to 19.9.9.1 Description The software contains an Improper Neutralization of Input During Web Page Generation issue, specifically a Stored Cross-site Scripting XSS condition. This allows for the injection ...

6.5CVSS5.9AI score0.0003EPSS
Exploits0References3
NVD
NVD
added 2025/09/06 2:15 a.m.14 views

CVE-2025-7366

The The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 19.9.7. This is due to the software allowing users to execute an action that does not properly validate a value befor...

7.3CVSS0.00776EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/09/06 1:45 a.m.16 views

CVE-2025-7368 Rehub <= 19.9.7 - Unauthenticated Password Protected Post Disclosure

The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 19.9.7 via the 'ajaxactionregetfullcontent' function due to insufficient restrictions on which posts can be included. This makes i...

5.3CVSS0.00102EPSS
Exploits0References2
CVE
CVE
added 2025/09/06 1:45 a.m.18 views

CVE-2025-7368

CVE-2025-7368 — REHub WordPress Theme: Unauthenticated information exposure in REHub up to version 19.9.7 due to insufficient restrictions in the ajax_action_re_getfullcontent path, allowing access to password-protected post data. Affected: REHub Theme for WordPress (versions ≤ 19.9.7). Root caus...

5.3CVSS5.8AI score0.00102EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/09/06 1:45 a.m.4 views

CVE-2025-7368 Rehub <= 19.9.7 - Unauthenticated Password Protected Post Disclosure

The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 19.9.7 via the 'ajaxactionregetfullcontent' function due to insufficient restrictions on which posts can be included. This makes i...

5.3CVSS5.8AI score0.00102EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/09/06 1:45 a.m.18 views

CVE-2025-7366 Rehub <= 19.9.7 - Unauthenticated Arbitrary Shortcode Execution via re_filterpost

The The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 19.9.7. This is due to the software allowing users to execute an action that does not properly validate a value befor...

7.3CVSS0.00776EPSS
Exploits0References2
CVE
CVE
added 2025/09/06 1:45 a.m.19 views

CVE-2025-7366

The CVE-2025-7366 entry concerns the REHub - Price Comparison, Multi Vendor Marketplace WordPress Theme. According to multiple sources in the connected documents, versions up to and including 19.9.7 are affected by an unauthenticated arbitrary shortcode execution flaw triggered via re_filterpost,...

7.3CVSS6.2AI score0.00776EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/09/06 1:45 a.m.2 views

CVE-2025-7366 Rehub <= 19.9.7 - Unauthenticated Arbitrary Shortcode Execution via re_filterpost

The The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 19.9.7. This is due to the software allowing users to execute an action that does not properly validate a value befor...

7.3CVSS6.2AI score0.00776EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/09/05 11:50 p.m.5 views

WordPress Rehub theme <= 19.9.7 - Unauthenticated Arbitrary Shortcode Execution via re_filterpost vulnerability

Unauthenticated Arbitrary Shortcode Execution via refilterpost vulnerability discovered by stealthcopter in WordPress Theme Rehub versions = 19.9.7...

7.3CVSS7.1AI score0.00776EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/17 8:53 a.m.15 views

CVE-2024-31232 WordPress Rehub theme <= 19.6.1 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Sizam Design Rehub allows PHP Local File Inclusion.This issue affects Rehub: from n/a through 19.6.1...

8CVSS6.9AI score0.00985EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/07 6:5 p.m.14 views

CVE-2024-31233 WordPress Rehub theme <= 19.6.1 - Auth. SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sizam Rehub.This issue affects Rehub: from n/a through 19.6.1...

8.5CVSS7.7AI score0.00166EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/04/03 12:0 a.m.7 views

WordPress Rehub Theme <= 19.6.1 is vulnerable to Local File Inclusion

Software Rehub Type Theme Vulnerable versions = 19.6.1 Fixed in 19.6.2 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-31232 Patch priority Low CVSS severity Low 8 Developer Claim ownership PSID 8895860d7f84 Credits Rafie Muhammad Patchstack Required privilege Editor...

8CVSS6.8AI score0.00985EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder