PureThemes vulnerabilities
17 published CVEs name PureThemes among the affected products.
- 17Published CVEs17 of them scored
- 7Last 12 monthspublished in the last year
- 1Critical8 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-57786
WordPress WorkScout-Core plugin <= 1.7.08 - Cross Site Request Forgery (CSRF) to Broken Authentication vulnerability
purethemes · WorkScout-Core
High8.8 - CVE-2026-52716
WordPress WorkScout-Core plugin <= 1.7.11 - Arbitrary File Deletion vulnerability
purethemes · WorkScout-Core
Medium6.5 - CVE-2025-14938
Listeo-Core - Directory Plugin by Purethemes <= 2.0.27 - Unauthenticated Arbitrary Media Upload
purethemes · Listeo-Core - Directory Plugin by Purethemes
Medium5.3 - CVE-2026-25461
WordPress Listeo Core plugin <= 2.0.21 - Reflected Cross Site Scripting (XSS) vulnerability
purethemes · Listeo Core
High7.1 - CVE-2025-67960
WordPress WorkScout-Core plugin <= 1.7.06 - Cross Site Scripting (XSS) vulnerability
purethemes · WorkScout-Core
High7.1 - CVE-2025-67959
WordPress WorkScout theme <= 4.1.07 - Cross Site Scripting (XSS) vulnerability
purethemes · WorkScout
High7.1 - CVE-2025-67932
WordPress Listeo Core plugin < 2.0.19 - Cross Site Scripting (XSS) vulnerability
purethemes · Listeo Core
High7.1 - CVE-2025-8413
Listeo <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via soundcloud Shortcode
purethemes · Listeo - Directory & Listings With Booking - WordPress Theme
Medium6.4 - CVE-2025-59571
WordPress WorkScout-Core plugin < 1.7.06 - Cross Site Scripting (XSS) vulnerability
purethemes · WorkScout-Core
High7.1 - CVE-2025-59572
WordPress WorkScout-Core Plugin < 1.7.06 - Cross Site Request Forgery (CSRF) Vulnerability
purethemes · WorkScout-Core
High8.8