CVE 5.3 MEDIUM

Rehub <= 19.9.7 - Unauthenticated Password Protected Post Disclosure_CVE-2025-7368

5.3 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 19.9.7 via the 'ajax_action_re_getfullcontent' function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected posts that they should not have access to.

Basic Information

ID CVE-2025-7368
Source Wordfence
Published Sep 6, 2025 at 01:45

Affected Product

Vendor sizam
Product REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme
Version *
Affected Versions sizam REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme *

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.