Description
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam Rehub rehub-theme allows Retrieve Embedded Sensitive Data.This issue affects Rehub: from n/a through <= 19.9.9.1.
Published: 2025-12-09
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability exists in the sizam Rehub WordPress theme and permits an unauthorized user to retrieve embedded sensitive data, thereby compromising the confidentiality of system information. It is a CWE‑497 weakness that can expose configuration details or other internal data. No additional destructive impact such as code execution is claimed in the official description.

Affected Systems

WordPress installations running the sizam Rehub theme version 19.9.9.1 or older are affected. The issue is confined to these theme releases and does not extend beyond them.

Risk and Exploitability

The CVSS score is 5.3, indicating moderate severity, while the EPSS score of less than 1% suggests a low likelihood of exploitation at present. The vulnerability is not listed in CISA KEV. Based on the description it is inferred that an attacker can exploit the theme through the web interface, requiring access to the WordPress environment that supports the vulnerable theme.

Generated by OpenCVE AI on April 29, 2026 at 11:34 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Rehub theme to the latest available version (at least 19.9.9.2 or newer) to eliminate the data exposure flaw.
  • If immediate upgrade is not feasible, restrict or remove any theme endpoints that expose sensitive data, and enforce strict permission checks on theme files and directories.
  • Apply general best practices such as frequent vulnerability scans with tools like WPScan and keep all WordPress components updated to the most recent releases.

Generated by OpenCVE AI on April 29, 2026 at 11:34 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 20 Jan 2026 15:30:00 +0000

Type Values Removed Values Added
References

Tue, 20 Jan 2026 14:45:00 +0000

Type Values Removed Values Added
References

Wed, 10 Dec 2025 18:00:00 +0000

Type Values Removed Values Added
First Time appeared Sizam Design
Sizam Design rehub
Wordpress
Wordpress wordpress
Vendors & Products Sizam Design
Sizam Design rehub
Wordpress
Wordpress wordpress

Tue, 09 Dec 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 09 Dec 2025 14:30:00 +0000

Type Values Removed Values Added
Description Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam Rehub rehub-theme allows Retrieve Embedded Sensitive Data.This issue affects Rehub: from n/a through <= 19.9.9.1.
Title WordPress Rehub theme <= 19.9.9.1 - Sensitive Data Exposure vulnerability
Weaknesses CWE-497
References

Subscriptions

Sizam Design Rehub
Wordpress Wordpress
cve-icon MITRE

Status: PUBLISHED

Assigner: Patchstack

Published:

Updated: 2026-04-28T19:23:03.616Z

Reserved: 2025-12-09T12:21:28.862Z

Link: CVE-2025-67565

cve-icon Vulnrichment

Updated: 2025-12-09T20:25:41.075Z

cve-icon NVD

Status : Deferred

Published: 2025-12-09T16:18:33.090

Modified: 2026-04-15T00:35:42.020

Link: CVE-2025-67565

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-29T11:45:10Z

Weaknesses