Log in Start free

PureThemes

Products

ProductCVEsExploitedLatest
WorkScout-Core6–Jul 13, 2026
Realteo3–Mar 14, 2025
Listeo Core3–Mar 25, 2026
Findeo2–Apr 22, 2021
Listeo2–Jun 1, 2021
WorkScout2–Jan 22, 2026
Listeo-Core - Directory Plugin by Purethemes1–Apr 4, 2026
Listeo - Directory & Listings With Booking - WordPress Theme1–Oct 25, 2025

Exploited and recent CVEs

  • CVE-2026-57786 High 8.8 WordPress WorkScout-Core plugin <= 1.7.08 - Cross Site Request Forgery (CSRF) to Broken Authentication vulnerability 0.2%
  • CVE-2026-52716 Medium 6.5 WordPress WorkScout-Core plugin <= 1.7.11 - Arbitrary File Deletion vulnerability 0.3%
  • CVE-2025-14938 Medium 5.3 Listeo-Core - Directory Plugin by Purethemes <= 2.0.27 - Unauthenticated Arbitrary Media Upload 0.3%
  • CVE-2026-25461 High 7.1 WordPress Listeo Core plugin <= 2.0.21 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-67960 High 7.1 WordPress WorkScout-Core plugin <= 1.7.06 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-67959 High 7.1 WordPress WorkScout theme <= 4.1.07 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-67932 High 7.1 WordPress Listeo Core plugin < 2.0.19 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-8413 Medium 6.4 Listeo <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via soundcloud Shortcode 0.2%
  • CVE-2025-59571 High 7.1 WordPress WorkScout-Core plugin < 1.7.06 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-59572 High 8.8 WordPress WorkScout-Core Plugin < 1.7.06 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2025-49404 High 8.5 WordPress Listeo-Core Plugin < 2.0.7 - SQL Injection Vulnerability 0.3%
  • CVE-2025-2232 Critical 9.8 Realteo - Real Estate Plugin by Purethemes <= 1.2.8 - Authentication Bypass via 'do_register_user' 0.6%
  • CVE-2021-24318 Unrated Listeo < 1.6.11 - Multiple Authenticated IDOR Vulnerabilities 1.0%
  • CVE-2021-24317 Unrated Listeo < 1.6.11 - Multiple XSS & XFS vulnerabilities 0.9%
  • CVE-2021-24246 Unrated WorkScout Core < 1.3.4 - Authenticated Stored XSS & XFS 0.7%
  • CVE-2021-24246 Unrated WorkScout Core < 1.3.4 - Authenticated Stored XSS & XFS 0.7%
  • CVE-2021-24238 Unrated Realteo < 1.2.4 - Arbitrary Property Deletion via IDOR 1.1%
  • CVE-2021-24238 Unrated Realteo < 1.2.4 - Arbitrary Property Deletion via IDOR 1.1%
  • CVE-2021-24237 Unrated Realteo < 1.2.4 - Unauthenticated Reflected Cross-Site Scripting (XSS) 6.3%
  • CVE-2021-24237 Unrated Realteo < 1.2.4 - Unauthenticated Reflected Cross-Site Scripting (XSS) 6.3%