PT-2025-44243 · Rehub · Rehub

Published 2025-10-29 · Updated 2025-10-29 · CVE-2025-64197

Positive Technologies · (AI Summary)

CVSS v3.1

6.5

Medium

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions sizam Rehub rehub-theme versions prior to 19.9.9.1

Description The software contains an Improper Neutralization of Input During Web Page Generation issue, specifically a Stored Cross-site Scripting (XSS) condition. This allows for the injection of malicious scripts through web pages. The issue affects the Rehub theme.

Recommendations Update to version 19.9.9.1 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-64197

Affected Products

Rehub

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-64197 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Theme/rehub-theme/vulnerability/wordpress-rehub-theme-19-9-9-1-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/1983527908573323315 · Twitter Post
• https://vdp.patchstack.com/database/Wordpress/Theme/rehub-theme/vulnerability/wordpress-rehub-theme-19-9-9-1-cross-site-scripting-xss-vulnerability · Note