CVE 7.3 HIGH

Rehub <= 19.9.7 - Unauthenticated Arbitrary Shortcode Execution via re_filterpost_CVE-2025-7366

7.3 / 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Description

The The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 19.9.7. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.

Basic Information

ID CVE-2025-7366
Source Wordfence
Published Sep 6, 2025 at 01:45

Affected Product

Vendor sizam
Product REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme
Version *
Affected Versions sizam REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme *

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.