Sizam vulnerabilities and threats

10 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.2%	CVE-2026-28126RH Frontend Publishing Pro (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-03-05CVE Database V5CVE-2026-28126 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sizam RH Frontend Publishing Pro rh-frontend allows Reflected XSS.This issue affects RH Frontend Publishing Pro: from n/a through < 4.3.4. EPSS 0.2%Vulnerability sizam	CVE Database V5	2026-03-05
Medium	4.3	EPSS 0.3%	CVE-2025-63051REHub Framework (WordPress plugin) · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium4.3EPSS 0.3%2026-01-22CVE Database V5CVE-2025-63051 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam REHub Framework rehub-framework allows Retrieve Embedded Sensitive Data.This issue affects REHub Framework: from n/a through < 19.9.9.4. EPSS 0.3%Vulnerability sizam	CVE Database V5	2026-01-22
High	7.5	EPSS 0.3%	CVE-2025-14358REHub Framework (WordPress plugin) · Missing Authorization High7.5EPSS 0.3%2026-01-08CVE Database V5CVE-2025-14358 Missing Authorization vulnerability in sizam REHub Framework rehub-framework allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects REHub Framework: from n/a through <= 19.9.5. EPSS 0.3%Vulnerability sizam	CVE Database V5	2026-01-08
Medium	6.5	EPSS 0.2%	CVE-2025-63050REHub Framework (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-12-09CVE Database V5CVE-2025-63050 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sizam REHub Framework rehub-framework allows Stored XSS.This issue affects REHub Framework: from n/a through < 19.9.9.7. EPSS 0.2%Vulnerability sizam CWE-79	CVE Database V5	2025-12-09
Medium	5.3	EPSS 0.3%	CVE-2025-67565Rehub (WordPress theme) · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium5.3EPSS 0.3%2025-12-09CVE Database V5CVE-2025-67565 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam Rehub rehub-theme allows Retrieve Embedded Sensitive Data.This issue affects Rehub: from n/a through <= 19.9.9.1. EPSS 0.3%Vulnerability sizam CWE-497	CVE Database V5	2025-12-09
Medium	6.5	EPSS 0.2%	CVE-2025-64197Rehub (WordPress theme) · Cross-site Scripting Medium6.5EPSS 0.2%2025-10-29CVE Database V5CVE-2025-64197 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sizam Rehub rehub-theme allows Stored XSS.This issue affects Rehub: from n/a through < 19.9.9.1. EPSS 0.2%Vulnerability sizam	CVE Database V5	2025-10-29
Medium	5.3	EPSS 0.3%	CVE-2025-7368REHub (WordPress theme) · Information Exposure Medium5.3EPSS 0.3%2025-09-06CVE Database V5CVE-2025-7368 The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 19.9.7 via the 'ajax_action_re_getfullcontent' function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected posts that they should not have access to. EPSS 0.3%Vulnerability sizam CWE-200	CVE Database V5	2025-09-06
High	7.3	EPSS 0.4%	CVE-2025-7366REHub (WordPress theme) · Code Injection High7.3EPSS 0.4%2025-09-06CVE Database V5CVE-2025-7366 The The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 19.9.7. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. EPSS 0.4%Vulnerability sizam CWE-94	CVE Database V5	2025-09-06
High	8.5	EPSS 0.5%	CVE-2024-31233Rehub (WordPress plugin) · SQL Injection High8.5EPSS 0.5%2024-04-07CVE Database V5CVE-2024-31233 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sizam Rehub.This issue affects Rehub: from n/a through 19.6.1. EPSS 0.5%Vulnerability Sizam CWE-89	CVE Database V5	2024-04-07
High	8.5	EPSS 0.5%	CVE-2024-31234REHub Framework (WordPress plugin) · SQL Injection High8.5EPSS 0.5%2024-04-07CVE Database V5CVE-2024-31234 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sizam REHub Framework.This issue affects REHub Framework: from n/a before 19.6.2. EPSS 0.5%Vulnerability Sizam CWE-89	CVE Database V5	2024-04-07

Page 1 of 1