Arbitrary Shortcode Execution in REHub WordPress Theme by ThemeForest

CVE-2025-7366

What is CVE-2025-7366?

The REHub - Price Comparison, Multi Vendor Marketplace WordPress Theme has a vulnerability that permits arbitrary shortcode execution due to improper validation of user input. This flaw allows unauthenticated attackers to exploit the system by executing potentially malicious shortcodes, which could compromise site integrity and expose sensitive data. All versions up to and including 19.9.7 are affected, prompting urgent updates and security measures.

References