Skip to content
OpenAdvisories

Vendor

purethemes

17 known vulnerabilities.

Products

WorkScout-Core 6 Listeo Core 3 Realteo 3 WorkScout 2 Findeo 2 Listeo 2 Listeo-Core - Directory Plugin by Purethemes 1 Listeo - Directory & Listings With Booking - WordPress Theme 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-52716

    WordPress WorkScout-Core plugin <= 1.7.11 - Arbitrary File Deletion vulnerability

    Unauthenticated Arbitrary File Deletion in WorkScout-Core <= 1.7.11 versions.

    purethemes WorkScout-Core
  • Medium 5.3
    CVE-2025-14938

    Listeo-Core - Directory Plugin by Purethemes <= 2.0.27 - Unauthenticated Arbitrary Media Upload

    The Listeo Core plugin for WordPress is vulnerable to unauthenticated arbitrary media upload in all versions up to, and including, 2.0.27 via the "listeo_core_handle_dropped_media" function. This is due to missing authorization and capability checks on the AJ…

    purethemes Listeo-Core - Directory Plugin by Purethemes Web / CMS
  • Medium 6.4
    CVE-2025-8413

    Listeo <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via soundcloud Shortcode

    The Listeo theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `soundcloud` shortcode in version less than, or equal to, 2.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it …

    purethemes Listeo - Directory & Listings With Booking - WordPress Theme Web / CMS