Skip to content
OpenAdvisories

Vendor

RadiusTheme

46 known vulnerabilities.

Products

Classified Listing 10 The Post Grid 9 Radius Blocks 4 ShopBuilder – Elementor WooCommerce Builder Addons 3 Team 3 Review Schema 2 Testimonial Slider And Showcase Pro 2 Metro 2 Food Menu – Restaurant Menu & Online Ordering for WooCommerce 1 Variation Images Gallery for WooCommerce 1 Portfolio – WordPress Portfolio Plugin 1 Radius Booking — Booking Calendar for Appointments & Services 1 Classified Listing - Mobile Number Verification 1 Widget for Google Reviews 1 Medilink-Core 1 Testimonial Slider and Showcase 1 Homlisti 1 ShopBuilder Pro – Elementor WooCommerce Builder Addons 1 Variation Swatches for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • High 7.1
    CVE-2026-42709

    WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin <= 6.0.5 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions.

    RadiusTheme Food Menu – Restaurant Menu & Online Ordering for WooCommerce Web / CMS
  • High 7.1
    CVE-2026-96351

    WordPress Classified Listing plugin <= 6.1.3 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions.

    RadiusTheme Classified Listing
  • High 8.1
    CVE-2026-15985

    Classified Listing - Mobile Number Verification <= 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP Login

    The Classified Listing - Mobile Number Verification plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.6.0. This is due to missing server-side Firebase OTP validation in the process_otp_login() function. This m…

    RadiusTheme Classified Listing - Mobile Number Verification Web / CMS
  • High 8.6
    CVE-2026-32477

    WordPress ShopBuilder Pro – Elementor WooCommerce Builder Addons plugin <= 2.2.0 - Arbitrary File Deletion vulnerability

    Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons <= 2.2.0 versions.

    RadiusTheme ShopBuilder Pro – Elementor WooCommerce Builder Addons Web / CMS
  • High 7.1
    CVE-2026-57344

    WordPress Classified Listing plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.4.2 versions.

    RadiusTheme Classified Listing
  • High 7.5
    CVE-2026-25026

    WordPress Team plugin <= 5.0.11 - Broken Access Control vulnerability

    Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from n/a through <= 5.0.11.

    RadiusTheme Team
  • High 7.5
    CVE-2026-32369

    WordPress Medilink-Core plugin < 2.0.7 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Medilink-Core medilink-core allows PHP Local File Inclusion.This issue affects Medilink-Core: from n/a through < 2.0.7.

    RadiusTheme Medilink-Core
  • High 7.1
    CVE-2026-27382

    WordPress Metro theme <= 2.13 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme Metro metro allows DOM-Based XSS.This issue affects Metro: from n/a through <= 2.13.

    RadiusTheme Metro
  • High 8.1
    CVE-2026-27383

    WordPress Metro theme <= 2.13 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Metro metro allows PHP Local File Inclusion.This issue affects Metro: from n/a through <= 2.13.

    RadiusTheme Metro
  • High 7.5
    CVE-2025-32657

    WordPress Testimonial Slider and Showcase Pro plugin <= 2.1.7 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Testimonial Slider And Showcase Pro testimonial-slider-showcase-pro allows PHP Local File Inclusion.This issue affects Testimo…

    RadiusTheme Testimonial Slider And Showcase Pro
  • High 8.1
    CVE-2025-53565

    WordPress Widget for Google Reviews <= 1.0.15 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Widget for Google Reviews business-reviews-wp allows PHP Local File Inclusion.This issue affects Widget for Google Reviews: fr…

    RadiusTheme Widget for Google Reviews
  • High 7.5
    CVE-2025-52715

    WordPress Classified Listing plugin <= 4.2.0 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Classified Listing classified-listing allows PHP Local File Inclusion.This issue affects Classified Listing: from n/a through …

    RadiusTheme Classified Listing
  • High 7.1
    CVE-2025-24745

    WordPress Classified Listing plugin <= 4.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme Classified Listing classified-listing allows Reflected XSS.This issue affects Classified Listing: from n/a through <= 4.0.1.

    RadiusTheme Classified Listing
  • High 8.1
    CVE-2025-32656

    WordPress Testimonial Slider and Showcase Pro plugin <= 2.3.15 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Testimonial Slider And Showcase Pro testimonial-slider-showcase-pro allows PHP Local File Inclusion.This issue affects Testimo…

    RadiusTheme Testimonial Slider And Showcase Pro
  • High 7.5
    CVE-2025-32159

    WordPress Radius Blocks plugin <= 2.2.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Radius Blocks radius-blocks allows PHP Local File Inclusion.This issue affects Radius Blocks: from n/a through <= 2.2.1.

    RadiusTheme Radius Blocks
  • High 7.5
    CVE-2025-30814

    WordPress The Post Grid plugin <= 7.7.17 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme The Post Grid the-post-grid allows PHP Local File Inclusion.This issue affects The Post Grid: from n/a through <= 7.7.17.

    RadiusTheme The Post Grid
  • High 7.1
    CVE-2023-37894

    WordPress Variation Images Gallery for WooCommerce Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RadiusTheme Variation Images Gallery for WooCommerce plugin <= 2.3.3 versions.

    RadiusTheme Variation Images Gallery for WooCommerce Web / CMS
  • High 7.1
    CVE-2023-37975

    WordPress Variation Swatches for WooCommerce Plugin <= 2.3.7 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RadiusTheme Variation Swatches for WooCommerce plugin <= 2.3.7 versions.

    RadiusTheme Variation Swatches for WooCommerce Web / CMS