Vulnerabilities > Radiustheme > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-09-30 | CVE-2024-3635 | Cross-site Scripting vulnerability in Radiustheme the Post Grid The Post Grid WordPress plugin before 7.5.0 does not sanitise and escape some of its Grid settings, which could allow high privilege users such as Editor and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). | 4.8 |
| 2024-09-13 | CVE-2024-7888 | Missing Authorization vulnerability in Radiustheme Classified Listing - Classified ADS & Business Directory The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions like export_forms(), import_forms(), update_fb_options(), and many more in all versions up to, and including, 3.1.7. | 4.3 |
| 2024-08-29 | CVE-2024-7418 | Unspecified vulnerability in Radiustheme the Post Grid The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.7.11 via the post_query_guten and post_query functions. | 4.3 |
| 2024-07-02 | CVE-2024-1427 | Cross-site Scripting vulnerability in Radiustheme the Post Grid The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the section title tag attribute in all versions up to, and including, 7.7.1 due to insufficient input sanitization and output escaping on user supplied attributes. | 5.4 |
| 2024-06-08 | CVE-2024-35739 | Cross-site Scripting vulnerability in Radiustheme Post Grid Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in RadiusTheme The Post Grid allows Stored XSS.This issue affects The Post Grid: from n/a through 7.7.1. | 5.4 |
| 2024-01-31 | CVE-2024-0836 | Missing Authorization vulnerability in Radiustheme Review Schema The WordPress Review & Structure Data Schema Plugin – Review Schema plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the rtrs_review_edit() function in all versions up to, and including, 2.1.14. | 4.3 |
| 2023-07-27 | CVE-2023-37894 | Cross-site Scripting vulnerability in Radiustheme Variation Images Gallery for Woocommerce Unauth. | 6.1 |
| 2023-04-04 | CVE-2023-23685 | Cross-site Scripting vulnerability in Radiustheme Portfolio Auth. | 5.4 |
| 2022-09-16 | CVE-2022-2654 | Cross-site Scripting vulnerability in Radiustheme products The Classima WordPress theme before 2.1.11 and some of its required plugins (Classified Listing before 2.2.14, Classified Listing Pro before 2.0.20, Classified Listing Store & Membership before 1.4.20 and Classima Core before 1.10) do not escape a parameter before outputting it back in attributes, leading to Reflected Cross-Site Scripting | 6.1 |
| 2022-09-16 | CVE-2022-2655 | Cross-site Scripting vulnerability in Radiustheme Classified Listing The Classified Listing Pro WordPress plugin before 2.0.20 does not escape a generated URL before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting | 6.1 |