Vulnerabilities > Radiustheme
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-09-30 | CVE-2024-3635 | Cross-site Scripting vulnerability in Radiustheme the Post Grid The Post Grid WordPress plugin before 7.5.0 does not sanitise and escape some of its Grid settings, which could allow high privilege users such as Editor and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). | 4.8 |
| 2024-09-13 | CVE-2024-7888 | Missing Authorization vulnerability in Radiustheme Classified Listing - Classified ADS & Business Directory The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions like export_forms(), import_forms(), update_fb_options(), and many more in all versions up to, and including, 3.1.7. | 4.3 |
| 2024-08-29 | CVE-2024-7418 | Unspecified vulnerability in Radiustheme the Post Grid The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.7.11 via the post_query_guten and post_query functions. | 4.3 |
| 2024-07-09 | CVE-2024-37520 | Path Traversal vulnerability in Radiustheme Shopbuilder Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons allows Path Traversal.This issue affects ShopBuilder – Elementor WooCommerce Builder Addons: from n/a through 2.1.12. | 8.8 |
| 2024-07-02 | CVE-2024-1427 | Cross-site Scripting vulnerability in Radiustheme the Post Grid The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the section title tag attribute in all versions up to, and including, 7.7.1 due to insufficient input sanitization and output escaping on user supplied attributes. | 5.4 |
| 2024-06-08 | CVE-2024-35739 | Cross-site Scripting vulnerability in Radiustheme Post Grid Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in RadiusTheme The Post Grid allows Stored XSS.This issue affects The Post Grid: from n/a through 7.7.1. | 5.4 |
| 2024-01-31 | CVE-2024-0836 | Missing Authorization vulnerability in Radiustheme Review Schema The WordPress Review & Structure Data Schema Plugin – Review Schema plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the rtrs_review_edit() function in all versions up to, and including, 2.1.14. | 4.3 |
| 2023-10-03 | CVE-2023-39923 | Cross-Site Request Forgery (CSRF) vulnerability in Radiustheme the Post Grid Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme The Post Grid plugin <= 7.2.7 versions. | 8.8 |
| 2023-07-27 | CVE-2023-37894 | Cross-site Scripting vulnerability in Radiustheme Variation Images Gallery for Woocommerce Unauth. | 6.1 |
| 2023-07-18 | CVE-2023-37387 | Cross-Site Request Forgery (CSRF) vulnerability in Radiustheme Classified Listing Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme Classified Listing plugin <= 2.4.5 versions. | 8.8 |