RadiusTheme
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Classified Listing | 10 | – | Sep 30, 2026 |
| The Post Grid | 9 | – | Sep 23, 2026 |
| Radius Blocks | 4 | – | Dec 18, 2025 |
| Team | 3 | – | Mar 25, 2026 |
| ShopBuilder – Elementor WooCommerce Builder Addons | 3 | – | Mar 13, 2026 |
| Review Schema | 2 | – | Sep 30, 2026 |
| Metro | 2 | – | Mar 5, 2026 |
| Testimonial Slider And Showcase Pro | 2 | – | Oct 22, 2025 |
| Radius Booking — Booking Calendar for Appointments & Services | 1 | – | Oct 6, 2026 |
| Medilink-Core | 1 | – | Mar 13, 2026 |
| Homlisti | 1 | – | Aug 20, 2026 |
| Food Menu – Restaurant Menu & Online Ordering for WooCommerce | 1 | – | Oct 10, 2026 |
| Testimonial Slider and Showcase | 1 | – | May 10, 2026 |
| Widget for Google Reviews | 1 | – | Aug 20, 2025 |
| Classified Listing - Mobile Number Verification | 1 | – | Aug 26, 2026 |
| Variation Images Gallery for WooCommerce | 1 | – | Jul 27, 2023 |
| Variation Swatches for WooCommerce | 1 | – | Jul 27, 2023 |
| Portfolio – WordPress Portfolio Plugin | 1 | – | Apr 4, 2023 |
Exploited and recent CVEs
- CVE-2026-42709 WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin <= 6.0.5 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-39764 WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.19 - SQL Injection vulnerability 0.3%
- CVE-2026-97282 WordPress Review Schema plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability 0.2%
- CVE-2026-96351 WordPress Classified Listing plugin <= 6.1.3 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-94680 WordPress The Post Grid plugin <= 7.9.5 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-94671 WordPress The Post Grid plugin <= 7.9.5 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-15985 Classified Listing - Mobile Number Verification <= 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP Login 0.5%
- CVE-2026-66647 WordPress Homlisti theme <= 3.1.2 - Broken Access Control vulnerability 0.3%
- CVE-2026-57355 WordPress Classified Listing plugin <= 5.4.2 - Broken Access Control vulnerability 0.3%
- CVE-2026-57344 WordPress Classified Listing plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2022-50947 WordPress Plugin Testimonial Slider and Showcase 2.2.6 Stored XSS 0.2%
- CVE-2026-25344 WordPress Review Schema plugin <= 2.2.6 - Sensitive Data Exposure vulnerability 0.3%
- CVE-2026-25026 WordPress Team plugin <= 5.0.11 - Broken Access Control vulnerability 0.3%
- CVE-2026-32396 WordPress Team plugin <= 5.0.13 - Broken Access Control vulnerability 0.2%
- CVE-2026-32372 WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.2.4 - Sensitive Data Exposure vulnerability 0.3%
- CVE-2026-32369 WordPress Medilink-Core plugin < 2.0.7 - Local File Inclusion vulnerability 0.4%
- CVE-2026-27383 WordPress Metro theme <= 2.13 - Local File Inclusion vulnerability 0.6%
- CVE-2026-27382 WordPress Metro theme <= 2.13 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-23546 WordPress Classified Listing plugin <= 5.3.4 - Sensitive Data Exposure vulnerability 0.4%
- CVE-2025-64282 WordPress Radius Blocks plugin <= 2.2.1 - Insecure Direct Object References (IDOR) vulnerability 0.2%
- CVE-2025-32657 WordPress Testimonial Slider and Showcase Pro plugin <= 2.1.7 - Local File Inclusion vulnerability 0.6%
- CVE-2025-57975 WordPress Team Plugin <= 5.0.6 - Broken Access Control Vulnerability 0.3%
- CVE-2025-58601 WordPress Classified Listing Plugin <= 5.0.6 - Broken Access Control Vulnerability 0.2%
- CVE-2025-53565 WordPress Widget for Google Reviews <= 1.0.15 - Local File Inclusion Vulnerability 0.6%
- CVE-2025-54698 WordPress Classified Listing Plugin plugin <= 5.0.0 - Content Injection Vulnerability 0.2%
- CVE-2025-52715 WordPress Classified Listing plugin <= 4.2.0 - Local File Inclusion Vulnerability 0.6%
- CVE-2025-24745 WordPress Classified Listing plugin <= 4.0.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-32656 WordPress Testimonial Slider and Showcase Pro plugin <= 2.3.15 - Local File Inclusion vulnerability 1.0%
- CVE-2025-32159 WordPress Radius Blocks plugin <= 2.2.1 - Local File Inclusion vulnerability 1.0%
- CVE-2025-30814 WordPress The Post Grid plugin <= 7.7.17 - Local File Inclusion vulnerability 1.1%