plugin
8 known security issues reported for the Rehub Framework WordPress plugin. Most recent disclosed Jan 22, 2026.
Running Rehub Framework on your site? Check whether your installed version is affected.
Scan your site free[en] Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam REHub Framework rehub-framework allows Retrieve Embedded Sensitive Data.This issue affects REHub Framework: from n/a through < 19.9.9.4.
[en] Missing Authorization vulnerability in sizam REHub Framework rehub-framework allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects REHub Framework: from n/a through <= 19.9.5.
The REHub Framework plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 19.9.5. This makes it possible for unauthenticated attackers to perform an unauthorized action.
[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sizam REHub Framework rehub-framework allows Stored XSS.This issue affects REHub Framework: from n/a through <= 19.9.8.
The reHub Framework plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and excluding, 19.9.9.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive user or configuration data.
The REHub Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and excluding, 19.9.9.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pag...
[en] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sizam REHub Framework.This issue affects REHub Framework: from n/a before 19.6.2.
The REHub Framework plugin for WordPress is vulnerable to SQL Injection in versions prior to 19.6.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to ap...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free