Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-39710 EUVD-2026-20417GHSA-h4g3-j2wx-7hjc

WordPress RT-Theme 18 | Extensions plugin <= 2.5 - Cross Site Request Forgery (CSRF) vulnerability

Published Apr 8, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Cross Site Request Forgery.This issue affects RT-Theme 18 | Extensions: from n/a through <= 2.5.

Affected products

VendorProductAffectedFixed
stmcan RT-Theme 18 | Extensions ≤ 2.5 —

References