RadiusTheme

Products

Exploited and recent CVEs

  • CVE-2026-42709 High 7.1 WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin <= 6.0.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-39764 Critical 9.3 WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.19 - SQL Injection vulnerability 0.3%
  • CVE-2026-97282 Medium 5.3 WordPress Review Schema plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2026-96351 High 7.1 WordPress Classified Listing plugin <= 6.1.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-94680 Medium 6.5 WordPress The Post Grid plugin <= 7.9.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-94671 Medium 6.5 WordPress The Post Grid plugin <= 7.9.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-15985 High 8.1 Classified Listing - Mobile Number Verification <= 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP Login 0.5%
  • CVE-2026-66647 Medium 6.5 WordPress Homlisti theme <= 3.1.2 - Broken Access Control vulnerability 0.3%
  • CVE-2026-57355 Medium 6.5 WordPress Classified Listing plugin <= 5.4.2 - Broken Access Control vulnerability 0.3%
  • CVE-2026-57344 High 7.1 WordPress Classified Listing plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2022-50947 Medium 6.4 WordPress Plugin Testimonial Slider and Showcase 2.2.6 Stored XSS 0.2%
  • CVE-2026-25344 Medium 6.5 WordPress Review Schema plugin <= 2.2.6 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2026-25026 High 7.5 WordPress Team plugin <= 5.0.11 - Broken Access Control vulnerability 0.3%
  • CVE-2026-32396 Medium 5.3 WordPress Team plugin <= 5.0.13 - Broken Access Control vulnerability 0.2%
  • CVE-2026-32372 Medium 5.3 WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.2.4 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2026-32369 High 7.5 WordPress Medilink-Core plugin < 2.0.7 - Local File Inclusion vulnerability 0.4%
  • CVE-2026-27383 High 8.1 WordPress Metro theme <= 2.13 - Local File Inclusion vulnerability 0.6%
  • CVE-2026-27382 High 7.1 WordPress Metro theme <= 2.13 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-23546 Medium 6.5 WordPress Classified Listing plugin <= 5.3.4 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2025-64282 Medium 4.3 WordPress Radius Blocks plugin <= 2.2.1 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2025-32657 High 7.5 WordPress Testimonial Slider and Showcase Pro plugin <= 2.1.7 - Local File Inclusion vulnerability 0.6%
  • CVE-2025-57975 Medium 4.3 WordPress Team Plugin <= 5.0.6 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-58601 Medium 4.3 WordPress Classified Listing Plugin <= 5.0.6 - Broken Access Control Vulnerability 0.2%
  • CVE-2025-53565 High 8.1 WordPress Widget for Google Reviews <= 1.0.15 - Local File Inclusion Vulnerability 0.6%
  • CVE-2025-54698 Medium 5.4 WordPress Classified Listing Plugin plugin <= 5.0.0 - Content Injection Vulnerability 0.2%
  • CVE-2025-52715 High 7.5 WordPress Classified Listing plugin <= 4.2.0 - Local File Inclusion Vulnerability 0.6%
  • CVE-2025-24745 High 7.1 WordPress Classified Listing plugin <= 4.0.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-32656 High 8.1 WordPress Testimonial Slider and Showcase Pro plugin <= 2.3.15 - Local File Inclusion vulnerability 1.0%
  • CVE-2025-32159 High 7.5 WordPress Radius Blocks plugin <= 2.2.1 - Local File Inclusion vulnerability 1.0%
  • CVE-2025-30814 High 7.5 WordPress The Post Grid plugin <= 7.7.17 - Local File Inclusion vulnerability 1.1%