Skip to content
OpenAdvisories

Vendor

RadiusTheme

46 known vulnerabilities.

27 results · Clear filters · Feed

  • Medium 5.3

    WordPress Review Schema plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability

    Unauthenticated Insecure Direct Object References (IDOR) in Review Schema <= 3.1.0 versions.

  • Medium 6.5

    WordPress The Post Grid plugin <= 7.9.5 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.

  • Medium 6.5

    WordPress The Post Grid plugin <= 7.9.5 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.

  • Medium 6.5

    WordPress Homlisti theme <= 3.1.2 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Homlisti <= 3.1.2 versions.

  • Medium 6.5

    WordPress Classified Listing plugin <= 5.4.2 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Classified Listing <= 5.4.2 versions.

  • Medium 6.4

    WordPress Plugin Testimonial Slider and Showcase 2.2.6 Stored XSS

    WordPress Plugin Testimonial Slider and Showcase 2.2.6 contains a stored cross-site scripting vulnerability that allows authenticated editors to inject malicious scripts by failing to sanitize the post_title parameter. Attackers with editor privileges can inj…

  • Medium 6.5

    WordPress Review Schema plugin <= 2.2.6 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme Review Schema review-schema allows Retrieve Embedded Sensitive Data.This issue affects Review Schema: from n/a through <= 2.2.6.

  • Medium 5.3

    WordPress Team plugin <= 5.0.13 - Broken Access Control vulnerability

    Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from n/a through <= 5.0.13.

  • Medium 5.3

    WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.2.4 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Retrieve Embedded Sensitive Data.This issue affects ShopBuilder – Elementor WooCommer…

  • Medium 6.5

    WordPress Classified Listing plugin <= 5.3.4 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in RadiusTheme Classified Listing classified-listing allows Retrieve Embedded Sensitive Data.This issue affects Classified Listing: from n/a through <= 5.3.4.

  • Medium 4.3

    WordPress Radius Blocks plugin <= 2.2.1 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in RadiusTheme Radius Blocks radius-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Radius Blocks: from n/a through <= 2.2.1.

  • Medium 4.3

    WordPress Team Plugin <= 5.0.6 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from n/a through <= 5.0.6.

  • Medium 4.3

    WordPress Classified Listing Plugin <= 5.0.6 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in RadiusTheme Classified Listing classified-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Classified Listing: from n/a through <= 5.0.6.

  • Medium 5.4

    WordPress Classified Listing Plugin plugin <= 5.0.0 - Content Injection Vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in RadiusTheme Classified Listing classified-listing allows Code Injection.This issue affects Classified Listing: from n/a through <= 5.0.0.

  • Medium 5.4

    WordPress Radius Blocks – WordPress Gutenberg Blocks Plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme Radius Blocks radius-blocks allows Cross Site Request Forgery.This issue affects Radius Blocks: from n/a through <= 2.1.2.

  • Medium 6.5

    WordPress Radius Blocks plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme Radius Blocks radius-blocks allows Stored XSS.This issue affects Radius Blocks: from n/a through <= 2.1.2.

  • Medium 5.3

    WordPress Classified Listing plugin <= 3.1.16 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Classified Listing classified-listing allows PHP Local File Inclusion.This issue affects Classified Listing: from n/a through …

  • Medium 6.5

    WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.4.

  • Medium 4.3

    WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.4.

  • Medium 5.4

    WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.4.

  • Medium 6.5

    WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 2.1.12 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder.This issue affects ShopBuilder – Elementor WooCommerce Builder …

  • Medium 6.5

    WordPress The Post Grid plugin <= 7.7.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.1.

  • Medium 5.3

    WordPress ShopBuilder plugin <= 2.1.8 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder.This issue affects ShopBuilder – Elementor WooCommerce Builder Addons: from n/a through <= 2.1.8.

  • Medium 5.4

    WordPress The Post Grid Plugin <= 7.2.7 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme The Post Grid plugin <= 7.2.7 versions.

  • Medium 5.4

    WordPress Classified Listing Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme Classified Listing plugin <= 2.4.5 versions.

  • Medium 4.3

    WordPress The Post Grid Plugin <= 5.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme The Post Grid plugin <= 5.0.4 versions.

  • Medium 6.5

    WordPress Portfolio – WordPress Portfolio Plugin Plugin <= 2.8.10 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in RadiusTheme Portfolio – WordPress Portfolio plugin <= 2.8.10 versions.