Purethemes vulnerabilities

Products

• Workscout-core 5
• Listeo Core 3
• Realteo 3
• Findeo 2
• Listeo 2
• Workscout 2

Newest

• purethemes workscout-core WordPress WorkScout-Core plugin <= 1.7.08 - Cross Site Request Forgery (CSRF) to Broken Authentication vulnerability CVE-2026-57786 8.8 HighJuly 13, 2026
• purethemes workscout-core WordPress WorkScout-Core plugin <= 1.7.11 - Arbitrary File Deletion vulnerability CVE-2026-52716 6.5 MediumJune 17, 2026
• purethemes listeo-core - directory plugin by purethemes Listeo-Core - Directory Plugin by Purethemes <= 2.0.27 - Unauthenticated Arbitrary Media Upload CVE-2025-14938 5.3 MediumApril 4, 2026
• purethemes listeo core WordPress Listeo Core plugin <= 2.0.21 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-25461 7.1 HighMarch 25, 2026
• purethemes workscout-core WordPress WorkScout-Core plugin <= 1.7.06 - Cross Site Scripting (XSS) vulnerability CVE-2025-67960 7.1 HighJanuary 22, 2026
• purethemes workscout WordPress WorkScout theme <= 4.1.07 - Cross Site Scripting (XSS) vulnerability CVE-2025-67959 7.1 HighJanuary 22, 2026
• purethemes listeo core WordPress Listeo Core plugin < 2.0.19 - Cross Site Scripting (XSS) vulnerability CVE-2025-67932 7.1 HighJanuary 8, 2026
• purethemes listeo - directory & listings with booking - wordpress theme Listeo <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via soundcloud Shortcode CVE-2025-8413 6.4 MediumOctober 25, 2025
• purethemes workscout-core WordPress WorkScout-Core plugin < 1.7.06 - Cross Site Scripting (XSS) vulnerability CVE-2025-59571 7.1 HighOctober 22, 2025
• purethemes workscout-core WordPress WorkScout-Core Plugin < 1.7.06 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-59572 8.8 HighSeptember 22, 2025
• purethemes listeo core WordPress Listeo-Core Plugin < 2.0.7 - SQL Injection Vulnerability CVE-2025-49404 8.5 HighAugust 28, 2025
• purethemes realteo Realteo - Real Estate Plugin by Purethemes <= 1.2.8 - Authentication Bypass via 'do_register_user' CVE-2025-2232 9.8 CriticalMarch 14, 2025
• purethemes listeo Listeo < 1.6.11 - Multiple Authenticated IDOR Vulnerabilities CVE-2021-24318 6.5 MediumJune 1, 2021
• purethemes listeo Listeo < 1.6.11 - Multiple XSS & XFS vulnerabilities CVE-2021-24317 6.1 MediumJune 1, 2021
• purethemes workscout, workscout core +1 more WorkScout Core < 1.3.4 - Authenticated Stored XSS & XFS CVE-2021-24246 5.4 MediumMay 5, 2021
• purethemes findeo, realteo +1 more Realteo < 1.2.4 - Arbitrary Property Deletion via IDOR CVE-2021-24238 6.5 MediumApril 22, 2021
• purethemes findeo, realteo +1 more Realteo < 1.2.4 - Unauthenticated Reflected Cross-Site Scripting (XSS) CVE-2021-24237 6.1 MediumApril 22, 2021