Skip to content

Techlabpro1 vulnerabilities

Products

Newest

radiustheme food menu – restaurant menu & online ordering for woocommerce WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin <= 6.0.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-42709 7.1 HighOctober 10, 2026
techlabpro1 team – team members showcase plugin Team <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ttp_filter_taxonomy' Post Meta via [tlpteam] Shortcode CVE-2026-102402 6.4 MediumOctober 10, 2026
techlabpro1 classified listing – ai-powered classified ads & business directory Classified Listing <= 5.4.2 - Missing Authorization to Authenticated (Subscriber+) Feature Modification via Multiple AJAX Handlers ('listingId'/'id' Parameters) CVE-2026-10779 4.3 MediumJune 19, 2026
techlabpro1 classified listing – ai-powered classified ads & business directory plugin Classified Listing <= 5.3.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via add_order_note and send_email_to_user_by_moderator AJAX Actions CVE-2026-7563 4.3 MediumMay 15, 2026
techlabpro1 classified listing – ai-powered classified ads & business directory plugin Classified Listing – Classified ads & Business Directory Plugin <= 5.0.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Listing Description CVE-2025-7711 5.4 MediumNovember 17, 2025
techlabpro1 classified listing – ai-powered classified ads & business directory plugin Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.2.0 - Missing Authorization to Authenticated (Subscriber+) Listing Types Tampering CVE-2025-12953 4.3 MediumNovember 11, 2025
techlabpro1 radius blocks – wordpress gutenberg blocks Radius Blocks <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via subHeadingTagName Parameter CVE-2025-5844 Public exploit 6.4 MediumAugust 15, 2025
radiustheme widget for google reviews Widget for Google Reviews <= 1.0.15 - Authenticated (Subscriber+) Directory Traversal to Local File Inclusion CVE-2025-7327 8.8 HighJuly 8, 2025
techlabpro1 review schema – review & structure data schema plugin Review Schema <= 2.2.4 - Authenticated (Contributor+) Local File Inclusion via Post Meta CVE-2025-1707 8.8 HighMarch 11, 2025
radiustheme classified listing, techlabpro1 classified listing – ai-powered classified ads & business directory plugin +1 more Classified Listing – Classified ads & Business Directory Plugin <= 4.0.4 - Unauthenticated Settings Exposure CVE-2025-1063 5.3 MediumFebruary 25, 2025
techlabpro team, techlabpro1 team – team members showcase plugin +1 more Team – Team Members Showcase Plugin <= 4.4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Update CVE-2024-13439 4.3 MediumFebruary 15, 2025
techlabpro1 food menu – restaurant menu & online ordering for woocommerce Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 5.1.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update CVE-2024-13415 4.3 MediumJanuary 31, 2025
techlabpro1 classified listing – ai-powered classified ads & business directory plugin, classified listing plugin +1 more Classified Listing – Classified ads & Business Directory Plugin <= 3.1.15.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update CVE-2024-11194 8.8 HighNovember 19, 2024
radiustheme classified listing, techlabpro1 classified listing – ai-powered classified ads & business directory plugin +1 more Classified Listing – Classified ads & Business Directory Plugin <= 3.1.7 - Missing Authorization CVE-2024-7888 6.3 MediumSeptember 13, 2024
radiustheme the post grid, techlabpro1 the post grid – shortcode, gutenberg blocks and elementor addon for post grid +1 more The Post Grid <= 7.7.11 - Authenticated (Contributor+) Information Disclosure CVE-2024-7418 4.3 MediumAugust 29, 2024
radiustheme the post grid, techlabpro1 the post grid – shortcode, gutenberg blocks and elementor addon for post grid +1 more The Post Grid <= 7.7.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via section title tag CVE-2024-1427 6.4 MediumJuly 2, 2024
techlabpro1 the post grid – shortcode, gutenberg blocks and elementor addon for post grid, wordpress post grid shortcode gutenberg blocks elementor +1 more The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 7.6.1 - Missing Authorization CVE-2024-3936 4.3 MediumMay 2, 2024
radiustheme classified listing, techlabpro1 classified listing – ai-powered classified ads & business directory plugin, classified listing plugin +2 more Classified Listing – Classified ads & Business Directory Plugin <= 3.0.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion CVE-2024-3893 4.3 MediumApril 25, 2024
radiustheme classified listing, techlabpro1 classified listing – ai-powered classified ads & business directory plugin, classified listing plugin +2 more Classified Listing – Classified ads & Business Directory Plugin <= 3.0.4 - Missing Authorization CVE-2024-1352 6.5 MediumApril 9, 2024
radiustheme classified listing, techlabpro1 classified listing – ai-powered classified ads & business directory plugin +1 more Classified Listing <= 3.0.4 - Cross-Site Request Forgery to Account Takeover via rtcl_update_user_account CVE-2024-1315 8.8 HighApril 9, 2024
radiustheme review schema, techlabpro1 review schema – review & structure data schema plugin +1 more WordPress Review & Structure Data Schema Plugin – Review Schema <= 2.1.14 - Missing Authorization to Arbitrary Review Update CVE-2024-0836 4.3 MediumJanuary 31, 2024