Advisories · Technology

purethemes WorkScout-Core.

Every CVE that names purethemes WorkScout-Core among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-57786 CVE record

CVSS 8.8 High

WordPress WorkScout-Core plugin <= 1.7.08 - Cross Site Request Forgery (CSRF) to Broken Authentication vulnerability
- purethemes WorkScout-Core
- Cross-site request forgery (CSRF)
Not analysed yet 13 Jul 2026
CVE-2026-52716 CVE record

CVSS 6.5 Medium

WordPress WorkScout-Core plugin <= 1.7.11 - Arbitrary File Deletion vulnerability
- purethemes WorkScout-Core
- Path traversal
Not analysed yet 17 Jun 2026
CVE-2025-67960 CVE record

CVSS 7.1 High

WordPress WorkScout-Core plugin <= 1.7.06 - Cross Site Scripting (XSS) vulnerability
- purethemes WorkScout-Core
- Cross-site scripting (XSS)
Not analysed yet 22 Jan 2026
CVE-2025-59571 CVE record

CVSS 7.1 High

WordPress WorkScout-Core plugin < 1.7.06 - Cross Site Scripting (XSS) vulnerability
- purethemes WorkScout-Core
- Cross-site scripting (XSS)
Not analysed yet 22 Oct 2025
CVE-2025-59572 CVE record

CVSS 8.8 High

WordPress WorkScout-Core Plugin < 1.7.06 - Cross Site Request Forgery (CSRF) Vulnerability
- purethemes WorkScout-Core
- Cross-site request forgery (CSRF)
Not analysed yet 22 Sept 2025
CVE-2021-24246 CVE record

WorkScout Core < 1.3.4 - Authenticated Stored XSS & XFS
- PureThemes Workscout Core
- PureThemes WorkScout
- Cross-site scripting (XSS)
Not analysed yet 5 May 2021