Skip to content
OpenAdvisories

Vendor

RadiusTheme

46 known vulnerabilities.

RadiusTheme at a glance

Last 12 months
21
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 5 10 December 2025: 1 vulnerability Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 8 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 1 vulnerability June 2026: 0 vulnerabilities Jun July 2026: 2 vulnerabilities August 2026: 3 vulnerabilities September 2026: 4 vulnerabilities Sep October 2026: 2 vulnerabilities, 1 critical November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202621
Sep 202640
Aug 202630
Jul 202620
Jun 202600
May 202610
Apr 202600
Mar 202680
Feb 202600
Jan 202600
Dec 202510
Nov 202500
Oct 202510
Sep 202520
Aug 202520
Jul 202500
Jun 202510
May 202500
Apr 202530
Mar 202510
Feb 202500
Jan 202510
Dec 202410

Products

Classified Listing 10 The Post Grid 9 Radius Blocks 4 ShopBuilder – Elementor WooCommerce Builder Addons 3 Team 3 Review Schema 2 Testimonial Slider And Showcase Pro 2 Metro 2 Food Menu – Restaurant Menu & Online Ordering for WooCommerce 1 Variation Images Gallery for WooCommerce 1 Portfolio – WordPress Portfolio Plugin 1 Radius Booking — Booking Calendar for Appointments & Services 1 Classified Listing - Mobile Number Verification 1 Widget for Google Reviews 1 Medilink-Core 1 Testimonial Slider and Showcase 1 Homlisti 1 ShopBuilder Pro – Elementor WooCommerce Builder Addons 1 Variation Swatches for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

46 results · Feed

  • High 7.1
    CVE-2026-42709

    WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin <= 6.0.5 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions.

    RadiusTheme Food Menu – Restaurant Menu & Online Ordering for WooCommerce Web / CMS
  • Critical 9.3
    CVE-2026-39764

    WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.19 - SQL Injection vulnerability

    Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments &amp; Services <= 1.0.19 versions.

    RadiusTheme Radius Booking — Booking Calendar for Appointments &amp; Services
  • Medium 5.3
    CVE-2026-97282

    WordPress Review Schema plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability

    Unauthenticated Insecure Direct Object References (IDOR) in Review Schema <= 3.1.0 versions.

    RadiusTheme Review Schema
  • High 7.1
    CVE-2026-96351

    WordPress Classified Listing plugin <= 6.1.3 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions.

    RadiusTheme Classified Listing
  • Medium 6.5
    CVE-2026-94680

    WordPress The Post Grid plugin <= 7.9.5 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.

    RadiusTheme The Post Grid
  • Medium 6.5
    CVE-2026-94671

    WordPress The Post Grid plugin <= 7.9.5 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.

    RadiusTheme The Post Grid
  • High 8.1
    CVE-2026-15985

    Classified Listing - Mobile Number Verification <= 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP Login

    The Classified Listing - Mobile Number Verification plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.6.0. This is due to missing server-side Firebase OTP validation in the process_otp_login() function. This m…

    RadiusTheme Classified Listing - Mobile Number Verification Web / CMS
  • High 8.6
    CVE-2026-32477

    WordPress ShopBuilder Pro – Elementor WooCommerce Builder Addons plugin <= 2.2.0 - Arbitrary File Deletion vulnerability

    Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons <= 2.2.0 versions.

    RadiusTheme ShopBuilder Pro – Elementor WooCommerce Builder Addons Web / CMS
  • Medium 6.5
    CVE-2026-66647

    WordPress Homlisti theme <= 3.1.2 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Homlisti <= 3.1.2 versions.

    RadiusTheme Homlisti
  • Medium 6.5
    CVE-2026-57355

    WordPress Classified Listing plugin <= 5.4.2 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Classified Listing <= 5.4.2 versions.

    RadiusTheme Classified Listing
  • High 7.1
    CVE-2026-57344

    WordPress Classified Listing plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.4.2 versions.

    RadiusTheme Classified Listing
  • Medium 6.4
    CVE-2022-50947

    WordPress Plugin Testimonial Slider and Showcase 2.2.6 Stored XSS

    WordPress Plugin Testimonial Slider and Showcase 2.2.6 contains a stored cross-site scripting vulnerability that allows authenticated editors to inject malicious scripts by failing to sanitize the post_title parameter. Attackers with editor privileges can inj…

    RadiusTheme Testimonial Slider and Showcase Web / CMS
  • Medium 6.5
    CVE-2026-25344

    WordPress Review Schema plugin <= 2.2.6 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme Review Schema review-schema allows Retrieve Embedded Sensitive Data.This issue affects Review Schema: from n/a through <= 2.2.6.

    RadiusTheme Review Schema
  • High 7.5
    CVE-2026-25026

    WordPress Team plugin <= 5.0.11 - Broken Access Control vulnerability

    Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from n/a through <= 5.0.11.

    RadiusTheme Team
  • Medium 5.3
    CVE-2026-32396

    WordPress Team plugin <= 5.0.13 - Broken Access Control vulnerability

    Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from n/a through <= 5.0.13.

    RadiusTheme Team
  • High 7.5
    CVE-2026-32369

    WordPress Medilink-Core plugin < 2.0.7 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Medilink-Core medilink-core allows PHP Local File Inclusion.This issue affects Medilink-Core: from n/a through < 2.0.7.

    RadiusTheme Medilink-Core
  • Medium 5.3
    CVE-2026-32372

    WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.2.4 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Retrieve Embedded Sensitive Data.This issue affects ShopBuilder – Elementor WooCommer…

    RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons Web / CMS
  • High 7.1
    CVE-2026-27382

    WordPress Metro theme <= 2.13 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme Metro metro allows DOM-Based XSS.This issue affects Metro: from n/a through <= 2.13.

    RadiusTheme Metro
  • High 8.1
    CVE-2026-27383

    WordPress Metro theme <= 2.13 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Metro metro allows PHP Local File Inclusion.This issue affects Metro: from n/a through <= 2.13.

    RadiusTheme Metro
  • Medium 6.5
    CVE-2026-23546

    WordPress Classified Listing plugin <= 5.3.4 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in RadiusTheme Classified Listing classified-listing allows Retrieve Embedded Sensitive Data.This issue affects Classified Listing: from n/a through <= 5.3.4.

    RadiusTheme Classified Listing
  • Medium 4.3
    CVE-2025-64282

    WordPress Radius Blocks plugin <= 2.2.1 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in RadiusTheme Radius Blocks radius-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Radius Blocks: from n/a through <= 2.2.1.

    RadiusTheme Radius Blocks
  • High 7.5
    CVE-2025-32657

    WordPress Testimonial Slider and Showcase Pro plugin <= 2.1.7 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Testimonial Slider And Showcase Pro testimonial-slider-showcase-pro allows PHP Local File Inclusion.This issue affects Testimo…

    RadiusTheme Testimonial Slider And Showcase Pro
  • Medium 4.3
    CVE-2025-57975

    WordPress Team Plugin <= 5.0.6 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from n/a through <= 5.0.6.

    RadiusTheme Team
  • Medium 4.3
    CVE-2025-58601

    WordPress Classified Listing Plugin <= 5.0.6 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in RadiusTheme Classified Listing classified-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Classified Listing: from n/a through <= 5.0.6.

    RadiusTheme Classified Listing
  • High 8.1
    CVE-2025-53565

    WordPress Widget for Google Reviews <= 1.0.15 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Widget for Google Reviews business-reviews-wp allows PHP Local File Inclusion.This issue affects Widget for Google Reviews: fr…

    RadiusTheme Widget for Google Reviews
  • Medium 5.4
    CVE-2025-54698

    WordPress Classified Listing Plugin plugin <= 5.0.0 - Content Injection Vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in RadiusTheme Classified Listing classified-listing allows Code Injection.This issue affects Classified Listing: from n/a through <= 5.0.0.

    RadiusTheme Classified Listing
  • High 7.5
    CVE-2025-52715

    WordPress Classified Listing plugin <= 4.2.0 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Classified Listing classified-listing allows PHP Local File Inclusion.This issue affects Classified Listing: from n/a through …

    RadiusTheme Classified Listing
  • High 7.1
    CVE-2025-24745

    WordPress Classified Listing plugin <= 4.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme Classified Listing classified-listing allows Reflected XSS.This issue affects Classified Listing: from n/a through <= 4.0.1.

    RadiusTheme Classified Listing
  • High 8.1
    CVE-2025-32656

    WordPress Testimonial Slider and Showcase Pro plugin <= 2.3.15 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Testimonial Slider And Showcase Pro testimonial-slider-showcase-pro allows PHP Local File Inclusion.This issue affects Testimo…

    RadiusTheme Testimonial Slider And Showcase Pro
  • High 7.5
    CVE-2025-32159

    WordPress Radius Blocks plugin <= 2.2.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Radius Blocks radius-blocks allows PHP Local File Inclusion.This issue affects Radius Blocks: from n/a through <= 2.2.1.

    RadiusTheme Radius Blocks
  • High 7.5
    CVE-2025-30814

    WordPress The Post Grid plugin <= 7.7.17 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme The Post Grid the-post-grid allows PHP Local File Inclusion.This issue affects The Post Grid: from n/a through <= 7.7.17.

    RadiusTheme The Post Grid
  • Medium 5.4
    CVE-2025-24712

    WordPress Radius Blocks – WordPress Gutenberg Blocks Plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme Radius Blocks radius-blocks allows Cross Site Request Forgery.This issue affects Radius Blocks: from n/a through <= 2.1.2.

    RadiusTheme Radius Blocks
  • Medium 6.5
    CVE-2024-54272

    WordPress Radius Blocks plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme Radius Blocks radius-blocks allows Stored XSS.This issue affects Radius Blocks: from n/a through <= 2.1.2.

    RadiusTheme Radius Blocks
  • Medium 5.3
    CVE-2024-52386

    WordPress Classified Listing plugin <= 3.1.16 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Classified Listing classified-listing allows PHP Local File Inclusion.This issue affects Classified Listing: from n/a through …

    RadiusTheme Classified Listing
  • Medium 6.5
    CVE-2024-37481

    WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.4.

    RadiusTheme The Post Grid
  • Medium 4.3
    CVE-2024-37482

    WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.4.

    RadiusTheme The Post Grid
  • Medium 5.4
    CVE-2024-37483

    WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.4.

    RadiusTheme The Post Grid
  • Medium 6.5
    CVE-2024-37520

    WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 2.1.12 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder.This issue affects ShopBuilder – Elementor WooCommerce Builder …

    RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons Web / CMS
  • Medium 6.5
    CVE-2024-35739

    WordPress The Post Grid plugin <= 7.7.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.1.

    RadiusTheme The Post Grid
  • Medium 5.3
    CVE-2024-34812

    WordPress ShopBuilder plugin <= 2.1.8 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder.This issue affects ShopBuilder – Elementor WooCommerce Builder Addons: from n/a through <= 2.1.8.

    RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons Web / CMS