Read the docs

sizam

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

sizam records in CISA KEV

No sizam vulnerabilities are listed in CISA KEV.

Records

10 records

TI-2025-13118 CVE-2025-14358 · GHSA-prp6-7xrh-x9fq

WordPress REHub Framework plugin <= 19.9.5 - Broken Access Control vulnerability

Priority LOW 39

Missing Authorization vulnerability in sizam REHub Framework rehub-framework allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects REHub Framework: from n/a through <= 19.9.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00341 Published 2026-01-08 No fix listed CWE-862
TI-2024-20610 CVE-2024-31234 · GHSA-jfpx-r6jw-f765

WordPress REHub Framework plugin < 19.6.2 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sizam REHub Framework.This issue affects REHub Framework: from n/a before 19.6.2.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00499 Published 2024-04-07 Fixed in 19.6.2 CWE-89
TI-2024-20609 CVE-2024-31233 · GHSA-cwrx-2mp2-4j43

WordPress Rehub theme <= 19.6.1 - Auth. SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sizam Rehub.This issue affects Rehub: from n/a through 19.6.1.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00523 Published 2024-04-07 No fix listed CWE-89
TI-2026-22467 CVE-2026-28126 · GHSA-9jp2-r7x7-993j

WordPress RH Frontend Publishing Pro plugin < 4.3.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sizam RH Frontend Publishing Pro rh-frontend allows Reflected XSS.This issue affects RH Frontend Publishing Pro: from…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00174 Published 2026-03-05 No fix listed CWE-79
TI-2025-06714 CVE-2025-7368 · GHSA-p5xc-wr34-q7q4

Rehub <= 19.9.7 - Unauthenticated Password Protected Post Disclosure

Priority LOW 30

The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 19.9.7 via the 'ajax_action_re_getfullcontent' functi…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00273 Published 2025-09-06 No fix listed CWE-200
TI-2025-39640 CVE-2025-64197 · GHSA-xjmw-rm34-58c8

WordPress Rehub theme < 19.9.9.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sizam Rehub rehub-theme allows Stored XSS.This issue affects Rehub: from n/a through < 19.9.9.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00204 Published 2025-10-29 No fix listed CWE-79
TI-2025-39198 CVE-2025-63050 · GHSA-7qf4-5fwh-3vwc

WordPress REHub Framework plugin < 19.9.9.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sizam REHub Framework rehub-framework allows Stored XSS.This issue affects REHub Framework: from n/a through < 19.9.9.…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00232 Published 2025-12-09 No fix listed CWE-79
TI-2025-41319 CVE-2025-67565 · GHSA-v2h6-hwp6-67qv

WordPress Rehub theme <= 19.9.9.1 - Sensitive Data Exposure vulnerability

Priority LOW 24

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam Rehub rehub-theme allows Retrieve Embedded Sensitive Data.This issue affects Rehub: from n/a through <= 19.9.9.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00285 Published 2025-12-09 No fix listed CWE-497
TI-2025-39199 CVE-2025-63051 · GHSA-q5wg-9m77-73x7

WordPress REHub Framework plugin < 19.9.9.4 - Sensitive Data Exposure vulnerability

Priority LOW 20

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam REHub Framework rehub-framework allows Retrieve Embedded Sensitive Data.This issue affects REHub Framework: from n/a throu…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00348 Published 2026-01-22 No fix listed CWE-497
Open these records in search →