Skip to content
Radiustheme vulnerabilities
Newest
-
mamunur rashid radius booking — booking calendar for appointments & services
WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - Broken Access Control vulnerability
CVE-2026-119508
5.3 Medium
-
mamunur rashid radius booking — booking calendar for appointments & services
WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - PHP Object Injection vulnerability
CVE-2026-119516
9.8 Critical
-
mamunur rashid shopbuilder – elementor woocommerce builder addons
WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.4.2 - Broken Access Control vulnerability
CVE-2026-54871
5.3 Medium
-
mamunur rashid the post grid
WordPress The Post Grid plugin <= 7.9.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-56056
6.5 Medium
-
mamunur rashid classified listing
WordPress Classified Listing plugin <= 6.1.5 - Direct static code injection vulnerability
CVE-2026-111828
4.3 Medium
-
radiustheme classified listing
Classified Listing < 6.1.1 - Subscriber+ Unattached Media Deletion and Modification via Gallery AJAX Handlers
CVE-2026-106646
5.9 Medium
-
radiustheme food menu – restaurant menu & online ordering for woocommerce
WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin <= 6.0.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42709
7.1 High
-
mamunur rashid classified listing
WordPress Classified Listing plugin <= 6.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-94665
6.5 Medium
-
mamunur rashid shopbuilder – elementor woocommerce builder addons
WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.4.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-95596
7.1 High
-
radiustheme radius booking — booking calendar for appointments & services
WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.19 - SQL Injection vulnerability
CVE-2026-39764
9.3 Critical
-
mamunur rashid review schema
WordPress Review Schema plugin 3.1.0 - Broken Access Control vulnerability
CVE-2026-97280
6.5 Medium
-
radiustheme review schema
WordPress Review Schema plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-97282
5.3 Medium
-
radiustheme classified listing
WordPress Classified Listing plugin <= 6.1.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-96351
7.1 High
-
radiustheme the post grid
The Post Grid < 7.9.5 - Contributor+ Stored HTML/iframe Injection via wp_kses_post Allow-List Widening
CVE-2026-84151
3.5 Low
-
oleh radiustheme team
WordPress Team plugin <= 6.0.0 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-95592
5.3 Medium
-
radiustheme the post grid
WordPress The Post Grid plugin <= 7.9.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-94680
6.5 Medium
-
radiustheme the post grid
WordPress The Post Grid plugin <= 7.9.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-94671
6.5 Medium
-
radiustheme classified listing
Classified Listing < 6.1.1 - Subscriber+ Arbitrary Attachment Deletion and Listing Image Tampering via IDOR
CVE-2026-16281
7.1 High
-
mamunur rashid classified listing
WordPress Classified Listing plugin <= 6.1.3 - Broken Access Control vulnerability
CVE-2026-84217
5.4 Medium
-
radiustheme classified listing - mobile number verification
Classified Listing - Mobile Number Verification <= 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP Login
CVE-2026-15985
8.1 High
-
radiustheme homlisti
WordPress Homlisti theme <= 3.1.2 - Broken Access Control vulnerability
CVE-2026-66647
6.5 Medium
-
radiustheme classified listing
Classified Listing < 5.4.4 - Contributor+ Store Revenue Total Disclosure via rtcl_revenue_order_search
CVE-2026-16276
2.7 Low
-
radiustheme classified listing
Classified Listing < 5.4.4 - Contributor+ Unpublished Post Content Disclosure via rtcl_block_css_get_posts
CVE-2026-16274
2.7 Low
-
radiustheme classified listing
Classified Listing < 5.3.9 - Subscriber+ Payment Receipt Disclosure via IDOR
CVE-2026-14183
4.3 Medium
-
radiustheme classified listing
WordPress Classified Listing plugin <= 5.4.2 - Broken Access Control vulnerability
CVE-2026-57355
6.5 Medium
-
radiustheme classified listing
WordPress Classified Listing plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57344
7.1 High
-
mamunur rashid classified listing
WordPress Classified Listing plugin <= 5.3.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42658
7.1 High
-
mamunur rashid classified listing
WordPress Classified Listing plugin <= 5.3.9 - Broken Access Control vulnerability
CVE-2026-42651
6.3 Medium
-
mamunur rashid classified listing
WordPress Classified Listing plugin <= 5.3.8 - Broken Access Control vulnerability
CVE-2026-42640
6.5 Medium
-
mamunur rashid classified listing
WordPress Classified Listing plugin <= 5.3.8 - Arbitrary File Download vulnerability
CVE-2026-42679
6.5 Medium
-
mamunur rashid the post grid
WordPress The Post Grid plugin <= 7.9.2 - Broken Access Control vulnerability
CVE-2026-49054
4.3 Medium
-
radiustheme testimonial slider and showcase
WordPress Plugin Testimonial Slider and Showcase 2.2.6 Stored XSS
CVE-2022-50947
5.1 Medium
-
radiustheme review schema
WordPress Review Schema plugin <= 2.2.6 - Sensitive Data Exposure vulnerability
CVE-2026-25344
6.5 Medium
-
radiustheme team
WordPress Team plugin <= 5.0.11 - Broken Access Control vulnerability
CVE-2026-25026
7.5 High
-
radiustheme team
WordPress Team plugin <= 5.0.13 - Broken Access Control vulnerability
CVE-2026-32396
5.3 Medium
-
radiustheme shopbuilder – elementor woocommerce builder addons
WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.2.4 - Sensitive Data Exposure vulnerability
CVE-2026-32372
5.3 Medium
-
radiustheme medilink-core
WordPress Medilink-Core plugin < 2.0.7 - Local File Inclusion vulnerability
CVE-2026-32369
7.5 High
-
radiustheme metro
WordPress Metro theme <= 2.13 - Local File Inclusion vulnerability
CVE-2026-27383
8.1 High
-
radiustheme metro
WordPress Metro theme <= 2.13 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-27382
7.1 High
-
radiustheme classified listing
WordPress Classified Listing plugin <= 5.3.4 - Sensitive Data Exposure vulnerability
CVE-2026-23546
6.5 Medium
-
radiustheme team
Team < 5.0.11 - Unauthenticated SQLi
CVE-2025-14124
Public exploit
8.6 High
-
radiustheme radius blocks
WordPress Radius Blocks plugin <= 2.2.1 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-64282
4.3 Medium
-
radiustheme testimonial slider and showcase pro
WordPress Testimonial Slider and Showcase Pro plugin <= 2.1.7 - Local File Inclusion vulnerability
CVE-2025-32657
7.5 High
-
radiustheme team
WordPress Team Plugin <= 5.0.6 - Broken Access Control Vulnerability
CVE-2025-57975
4.3 Medium
-
radiustheme classified listing
WordPress Classified Listing Plugin <= 5.0.6 - Broken Access Control Vulnerability
CVE-2025-58601
4.3 Medium
-
radiustheme widget for google reviews
WordPress Widget for Google Reviews <= 1.0.15 - Local File Inclusion Vulnerability
CVE-2025-53565
8.1 High
-
radiustheme classified listing
WordPress Classified Listing Plugin plugin <= 5.0.0 - Content Injection Vulnerability
CVE-2025-54698
5.4 Medium
-
radiustheme widget for google reviews
Widget for Google Reviews <= 1.0.15 - Authenticated (Subscriber+) Directory Traversal to Local File Inclusion
CVE-2025-7327
8.8 High
-
radiustheme classified listing
WordPress Classified Listing plugin <= 4.2.0 - Local File Inclusion Vulnerability
CVE-2025-52715
7.5 High
-
radiustheme team, team - wordpress team members showcase +1 more
Team Members Showcase < 4.4.2 - Editor+ Stored XSS
CVE-2024-9236
4.8 Medium
- Show olderLoading…