Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Vendor: sizam Clear all filters
TI-2026-22467 CVE-2026-28126 · GHSA-9jp2-r7x7-993j

WordPress RH Frontend Publishing Pro plugin < 4.3.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sizam RH Frontend Publishing Pro rh-frontend allows Reflected XSS.This issue affects RH Frontend Publishing Pro: from…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00174 Published 2026-03-05 No fix listed CWE-79
TI-2025-39199 CVE-2025-63051 · GHSA-q5wg-9m77-73x7

WordPress REHub Framework plugin < 19.9.9.4 - Sensitive Data Exposure vulnerability

Priority LOW 20

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam REHub Framework rehub-framework allows Retrieve Embedded Sensitive Data.This issue affects REHub Framework: from n/a throu…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00348 Published 2026-01-22 No fix listed CWE-497
TI-2025-13118 CVE-2025-14358 · GHSA-prp6-7xrh-x9fq

WordPress REHub Framework plugin <= 19.9.5 - Broken Access Control vulnerability

Priority LOW 39

Missing Authorization vulnerability in sizam REHub Framework rehub-framework allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects REHub Framework: from n/a through <= 19.9.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00341 Published 2026-01-08 No fix listed CWE-862
TI-2025-39198 CVE-2025-63050 · GHSA-7qf4-5fwh-3vwc

WordPress REHub Framework plugin < 19.9.9.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sizam REHub Framework rehub-framework allows Stored XSS.This issue affects REHub Framework: from n/a through < 19.9.9.…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00232 Published 2025-12-09 No fix listed CWE-79
TI-2025-41319 CVE-2025-67565 · GHSA-v2h6-hwp6-67qv

WordPress Rehub theme <= 19.9.9.1 - Sensitive Data Exposure vulnerability

Priority LOW 24

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam Rehub rehub-theme allows Retrieve Embedded Sensitive Data.This issue affects Rehub: from n/a through <= 19.9.9.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00285 Published 2025-12-09 No fix listed CWE-497
TI-2025-39640 CVE-2025-64197 · GHSA-xjmw-rm34-58c8

WordPress Rehub theme < 19.9.9.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sizam Rehub rehub-theme allows Stored XSS.This issue affects Rehub: from n/a through < 19.9.9.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00204 Published 2025-10-29 No fix listed CWE-79
TI-2025-06714 CVE-2025-7368 · GHSA-p5xc-wr34-q7q4

Rehub <= 19.9.7 - Unauthenticated Password Protected Post Disclosure

Priority LOW 30

The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 19.9.7 via the 'ajax_action_re_getfullcontent' functi…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00273 Published 2025-09-06 No fix listed CWE-200
TI-2024-20609 CVE-2024-31233 · GHSA-cwrx-2mp2-4j43

WordPress Rehub theme <= 19.6.1 - Auth. SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sizam Rehub.This issue affects Rehub: from n/a through 19.6.1.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00523 Published 2024-04-07 No fix listed CWE-89
TI-2024-20610 CVE-2024-31234 · GHSA-jfpx-r6jw-f765

WordPress REHub Framework plugin < 19.6.2 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sizam REHub Framework.This issue affects REHub Framework: from n/a before 19.6.2.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00499 Published 2024-04-07 Fixed in 19.6.2 CWE-89