PureThemes vulnerabilities

CVEs per yearBy the year they were published

1. 20215
2. 20255
3. 20267

Newest CVEs

• CVE-2026-57786

  WordPress WorkScout-Core plugin <= 1.7.08 - Cross Site Request Forgery (CSRF) to Broken Authentication vulnerability

  purethemes · WorkScout-Core

  High8.8
• CVE-2026-52716

  WordPress WorkScout-Core plugin <= 1.7.11 - Arbitrary File Deletion vulnerability

  purethemes · WorkScout-Core

  Medium6.5
• CVE-2025-14938

  Listeo-Core - Directory Plugin by Purethemes <= 2.0.27 - Unauthenticated Arbitrary Media Upload

  purethemes · Listeo-Core - Directory Plugin by Purethemes

  Medium5.3
• CVE-2026-25461

  WordPress Listeo Core plugin <= 2.0.21 - Reflected Cross Site Scripting (XSS) vulnerability

  purethemes · Listeo Core

  High7.1
• CVE-2025-67960

  WordPress WorkScout-Core plugin <= 1.7.06 - Cross Site Scripting (XSS) vulnerability

  purethemes · WorkScout-Core

  High7.1
• CVE-2025-67959

  WordPress WorkScout theme <= 4.1.07 - Cross Site Scripting (XSS) vulnerability

  purethemes · WorkScout

  High7.1
• CVE-2025-67932

  WordPress Listeo Core plugin < 2.0.19 - Cross Site Scripting (XSS) vulnerability

  purethemes · Listeo Core

  High7.1
• CVE-2025-8413

  Listeo <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via soundcloud Shortcode

  purethemes · Listeo - Directory & Listings With Booking - WordPress Theme

  Medium6.4
• CVE-2025-59571

  WordPress WorkScout-Core plugin < 1.7.06 - Cross Site Scripting (XSS) vulnerability

  purethemes · WorkScout-Core

  High7.1
• CVE-2025-59572

  WordPress WorkScout-Core Plugin < 1.7.06 - Cross Site Request Forgery (CSRF) Vulnerability

  purethemes · WorkScout-Core

  High8.8