Skip to content
OpenAdvisories

Vendor

purethemes

17 known vulnerabilities.

Products

WorkScout-Core 6 Listeo Core 3 Realteo 3 WorkScout 2 Findeo 2 Listeo 2 Listeo-Core - Directory Plugin by Purethemes 1 Listeo - Directory & Listings With Booking - WordPress Theme 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2026-57786

    WordPress WorkScout-Core plugin <= 1.7.08 - Cross Site Request Forgery (CSRF) to Broken Authentication vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in purethemes WorkScout-Core workscout-core allows Authentication Bypass.This issue affects WorkScout-Core: from n/a through <= 1.7.08.

    purethemes WorkScout-Core
  • High 7.1
    CVE-2026-25461

    WordPress Listeo Core plugin <= 2.0.21 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in purethemes Listeo Core listeo-core allows Reflected XSS.This issue affects Listeo Core: from n/a through <= 2.0.21.

    purethemes Listeo Core
  • High 7.1
    CVE-2025-67959

    WordPress WorkScout theme <= 4.1.07 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in purethemes WorkScout workscout allows Reflected XSS.This issue affects WorkScout: from n/a through <= 4.1.07.

    purethemes WorkScout
  • High 7.1
    CVE-2025-67960

    WordPress WorkScout-Core plugin <= 1.7.06 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in purethemes WorkScout-Core workscout-core allows Reflected XSS.This issue affects WorkScout-Core: from n/a through <= 1.7.06.

    purethemes WorkScout-Core
  • High 7.1
    CVE-2025-67932

    WordPress Listeo Core plugin < 2.0.19 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in purethemes Listeo Core listeo-core allows Reflected XSS.This issue affects Listeo Core: from n/a through < 2.0.19.

    purethemes Listeo Core
  • High 7.1
    CVE-2025-59571

    WordPress WorkScout-Core plugin < 1.7.06 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in purethemes WorkScout-Core workscout-core allows Reflected XSS.This issue affects WorkScout-Core: from n/a through < 1.7.06.

    purethemes WorkScout-Core
  • High 8.8
    CVE-2025-59572

    WordPress WorkScout-Core Plugin < 1.7.06 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in purethemes WorkScout-Core workscout-core allows Cross Site Request Forgery.This issue affects WorkScout-Core: from n/a through < 1.7.06.

    purethemes WorkScout-Core
  • High 8.5
    CVE-2025-49404

    WordPress Listeo-Core Plugin < 2.0.7 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in purethemes Listeo Core listeo-core allows SQL Injection.This issue affects Listeo Core: from n/a through < 2.0.7.

    purethemes Listeo Core