CVE-2025-7368CWE-200

Rehub <= 19.9.7 - Unauthenticated Password Protected Post Disclosure

Medium · published September 6, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
18.7
In the wild
Unconfirmed
What it is

The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 19.9.7 via the 'ajax_action_re_getfullcontent' function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected posts that they should not have access to.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00273 · 18.7th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-09-06T01:45Z
EPSS history
Timeline
  • 06 SEP 01:45Z
    Rehub <= 19.9.7 - Unauthenticated Password Protected Post Disclosure
    cvelistv5