PT-2025-36348 · WordPress · Rehub - Price Comparison

Matthew Rollings · Published 2025-09-06 · Updated 2025-09-06 · CVE-2025-7368

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme versions prior to 19.9.8

Description The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme for WordPress is susceptible to information exposure due to insufficient restrictions on post inclusion within the ajax action re getfullcontent function. This allows unauthenticated attackers to extract data from password-protected posts without authorization.

Recommendations Update REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme to version 19.9.8 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-7368

Affected Products

Rehub - Price Comparison

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-7368 · Security Note
• https://wordfence.com/threat-intel/vulnerabilities/id/5f24313e-c246-44f8-b144-d95c55e71456?source=cve · Note
• https://themeforest.net/item/rehub-directory-multi-vendor-shop-coupon-affiliate-theme/7646339#item-description__19-9-8-15-augl-2025 · Note
• https://twitter.com/VulmonFeeds/status/1964252682459189672 · Twitter Post
• https://twitter.com/CVEnew/status/1964195404880498921 · Twitter Post
• https://t.me/CVEtracker/31840 · Telegram Post
• https://t.me/cveNotify/134529 · Telegram Post