TownHub - Directory & Listing WordPress Theme

TownHub - Directory & Listing WordPress Theme has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2020; all 5 are fixed as of September 2026. Their average CVSS score is 6.6, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 2 high. 2019 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (80%). Other recurring categories include Authorization Bypass Through User-Controlled Key.

Every one of the 5 issues recorded for TownHub - Directory & Listing WordPress Theme has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by R3N0.

Strategic Overview

Avg CVSSMedium

6.6/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all TownHub - Directory & Listing WordPress Theme vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2019-20212

CTHthemes CityBook <= 2.3.3, TownHub <= 1.0.5, and EasyBook <= 1.2.1 - Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

5 records


2020-06-19 00:00	TownHub <= 1.2.9 - Reflected Cross-Site Scripting TownHub - Directory & Listing… <= 1.2.9	`N/A`	6.1 Medium	R3N0	Yes
2019-12-27 00:00	CTHthemes CityBook < 2.3.4, TownHub < 1.0.6, EasyBook < 1.2.2 Themes - Authenticated Post Deleition via IDOR TownHub - Directory & Listing… < 1.0.6	`CVE-2019-20209`	6.5 Medium	R3N0	Yes
2019-12-27 00:00	CTHthemes CityBook <= 2.3.3, TownHub <= 1.0.5, and EasyBook <= 1.2.1 - Stored Cross-Site Scripting TownHub - Directory & Listing… <= 1.0.5	`CVE-2019-20212`	7.2 High	R3N0	Yes
2019-12-27 00:00	CTHthemes CityBook <= 2.3.3, TownHub <= 1.0.5, and EasyBook <= 1.2.1 - Stored Cross-Site Scripting TownHub - Directory & Listing… <= 1.0.5	`CVE-2019-20211`	7.2 High	R3N0	Yes
2019-12-27 00:00	CTHthemes CityBook Theme < 2.3.4, TownHub Theme < 1.0.6, EasyBook Theme < 1.2.2 - Cross-Site Scripting TownHub - Directory & Listing… < 1.0.6	`CVE-2019-20210`	6.1 Medium	R3N0	Yes

Showing 1–5 of 5 reports