CVE-2025-7368

MEDIUM

REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme ...

Title source: llm

Description

The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 19.9.7 via the 'ajax_action_re_getfullcontent' function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected posts that they should not have access to.

References (2)

Core 2

Core References

Various Sources

https://themeforest.net/item/rehub-directory-multi-vendor-shop-coupon-affiliate-theme/7646339#item-description__19-9-8-15-augl-2025

Third Party Advisory

https://www.wordfence.com/threat-intel/vulnerabilities/id/5f24313e-c246-44f8-b144-d95c55e71456?source=cve

Scores

CVSS v3 5.3

EPSS 0.0026

EPSS Percentile 16.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-200

Status published

Products (1)

sizam/REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme < 19.9.7

Published Sep 06, 2025

Tracked Since Feb 18, 2026