CVE-2025-67565

MediumCVSS 5.3

Published: 09/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

19th percentile - higher than 19% of all known CVEs

Summary

The Rehub theme from sizam is vulnerable to exposure of sensitive system information to unauthorized control sphere. This affects versions up to and including 19.9.9.1, allowing retrieval of embedded sensitive data.

Risk Assessment

An attacker can access sensitive system data, potentially leading to confidentiality breaches and aiding further attacks.

Recommendation

Update the Rehub theme to the latest patched version. Also check for any data leaks.

Other vulnerabilities in Rehub

CVE-2025-64197Medium
A stored cross-site scripting vulnerability in Rehub theme (before 19.9.9.1) allows script injection during web page generation.

Original NVD description (English source)

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam Rehub rehub-theme allows Retrieve Embedded Sensitive Data.This issue affects Rehub: from n/a through <= 19.9.9.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS