# cve.now: Radiustheme

The newest entries naming Radiustheme as an affected vendor (up to 200), of 46 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-42709](https://cve.now/CVE-2026-42709.md): WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin \<= 6.0.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-39764](https://cve.now/CVE-2026-39764.md): WordPress Radius Booking — Booking Calendar for Appointments & Services plugin \<= 1.0.19 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2026-97282](https://cve.now/CVE-2026-97282.md): WordPress Review Schema plugin \<= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3)
- [CVE-2026-96351](https://cve.now/CVE-2026-96351.md): WordPress Classified Listing plugin \<= 6.1.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-94680](https://cve.now/CVE-2026-94680.md): WordPress The Post Grid plugin \<= 7.9.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2026-94671](https://cve.now/CVE-2026-94671.md): WordPress The Post Grid plugin \<= 7.9.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2026-15985](https://cve.now/CVE-2026-15985.md): Classified Listing - Mobile Number Verification \<= 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP Login (CVSS 8.1)
- [CVE-2026-32477](https://cve.now/CVE-2026-32477.md): WordPress ShopBuilder Pro – Elementor WooCommerce Builder Addons plugin \<= 2.2.0 - Arbitrary File Deletion vulnerability (CVSS 8.6)
- [CVE-2026-66647](https://cve.now/CVE-2026-66647.md): WordPress Homlisti theme \<= 3.1.2 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2026-57355](https://cve.now/CVE-2026-57355.md): WordPress Classified Listing plugin \<= 5.4.2 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2026-57344](https://cve.now/CVE-2026-57344.md): WordPress Classified Listing plugin \<= 5.4.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2022-50947](https://cve.now/CVE-2022-50947.md): WordPress Plugin Testimonial Slider and Showcase 2.2.6 Stored XSS (CVSS 5.1)
- [CVE-2026-25344](https://cve.now/CVE-2026-25344.md): WordPress Review Schema plugin \<= 2.2.6 - Sensitive Data Exposure vulnerability (CVSS 6.5)
- [CVE-2026-25026](https://cve.now/CVE-2026-25026.md): WordPress Team plugin \<= 5.0.11 - Broken Access Control vulnerability (CVSS 7.5)
- [CVE-2026-32396](https://cve.now/CVE-2026-32396.md): WordPress Team plugin \<= 5.0.13 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32372](https://cve.now/CVE-2026-32372.md): WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin \<= 3.2.4 - Sensitive Data Exposure vulnerability (CVSS 5.3)
- [CVE-2026-32369](https://cve.now/CVE-2026-32369.md): WordPress Medilink-Core plugin \< 2.0.7 - Local File Inclusion vulnerability (CVSS 7.5)
- [CVE-2026-27383](https://cve.now/CVE-2026-27383.md): WordPress Metro theme \<= 2.13 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-27382](https://cve.now/CVE-2026-27382.md): WordPress Metro theme \<= 2.13 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-23546](https://cve.now/CVE-2026-23546.md): WordPress Classified Listing plugin \<= 5.3.4 - Sensitive Data Exposure vulnerability (CVSS 6.5)
- [CVE-2025-64282](https://cve.now/CVE-2025-64282.md): WordPress Radius Blocks plugin \<= 2.2.1 - Insecure Direct Object References (IDOR) vulnerability (CVSS 4.3)
- [CVE-2025-32657](https://cve.now/CVE-2025-32657.md): WordPress Testimonial Slider and Showcase Pro plugin \<= 2.1.7 - Local File Inclusion vulnerability (CVSS 7.5)
- [CVE-2025-57975](https://cve.now/CVE-2025-57975.md): WordPress Team Plugin \<= 5.0.6 - Broken Access Control Vulnerability (CVSS 4.3)
- [CVE-2025-58601](https://cve.now/CVE-2025-58601.md): WordPress Classified Listing Plugin \<= 5.0.6 - Broken Access Control Vulnerability (CVSS 4.3)
- [CVE-2025-53565](https://cve.now/CVE-2025-53565.md): WordPress Widget for Google Reviews \<= 1.0.15 - Local File Inclusion Vulnerability (CVSS 8.1)
- [CVE-2025-54698](https://cve.now/CVE-2025-54698.md): WordPress Classified Listing Plugin plugin \<= 5.0.0 - Content Injection Vulnerability (CVSS 5.4)
- [CVE-2025-52715](https://cve.now/CVE-2025-52715.md): WordPress Classified Listing plugin \<= 4.2.0 - Local File Inclusion Vulnerability (CVSS 7.5)
- [CVE-2025-24745](https://cve.now/CVE-2025-24745.md): WordPress Classified Listing plugin \<= 4.0.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-32656](https://cve.now/CVE-2025-32656.md): WordPress Testimonial Slider and Showcase Pro plugin \<= 2.3.15 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-32159](https://cve.now/CVE-2025-32159.md): WordPress Radius Blocks plugin \<= 2.2.1 - Local File Inclusion vulnerability (CVSS 7.5)
- [CVE-2025-30814](https://cve.now/CVE-2025-30814.md): WordPress The Post Grid plugin \<= 7.7.17 - Local File Inclusion vulnerability (CVSS 7.5)
- [CVE-2025-24712](https://cve.now/CVE-2025-24712.md): WordPress Radius Blocks – WordPress Gutenberg Blocks Plugin \<= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4)
- [CVE-2024-54272](https://cve.now/CVE-2024-54272.md): WordPress Radius Blocks plugin \<= 2.1.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-52386](https://cve.now/CVE-2024-52386.md): WordPress Classified Listing plugin \<= 3.1.16 - Local File Inclusion vulnerability (CVSS 5.3)
- [CVE-2024-37481](https://cve.now/CVE-2024-37481.md): WordPress The Post Grid plugin \<= 7.7.4 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2024-37482](https://cve.now/CVE-2024-37482.md): WordPress The Post Grid plugin \<= 7.7.4 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2024-37483](https://cve.now/CVE-2024-37483.md): WordPress The Post Grid plugin \<= 7.7.4 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2024-37520](https://cve.now/CVE-2024-37520.md): WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin \<= 2.1.12 - Local File Inclusion vulnerability (CVSS 6.5)
- [CVE-2024-35739](https://cve.now/CVE-2024-35739.md): WordPress The Post Grid plugin \<= 7.7.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-34812](https://cve.now/CVE-2024-34812.md): WordPress ShopBuilder plugin \<= 2.1.8 - Sensitive Data Exposure vulnerability (CVSS 5.3)
- [CVE-2023-39923](https://cve.now/CVE-2023-39923.md): WordPress The Post Grid Plugin \<= 7.2.7 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4)
- [CVE-2023-37894](https://cve.now/CVE-2023-37894.md): WordPress Variation Images Gallery for WooCommerce Plugin \<= 2.3.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1)
- [CVE-2023-37975](https://cve.now/CVE-2023-37975.md): WordPress Variation Swatches for WooCommerce Plugin \<= 2.3.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1)
- [CVE-2023-37387](https://cve.now/CVE-2023-37387.md): WordPress Classified Listing Plugin \<= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4)
- [CVE-2022-46853](https://cve.now/CVE-2022-46853.md): WordPress The Post Grid Plugin \<= 5.0.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3)
- [CVE-2023-23685](https://cve.now/CVE-2023-23685.md): WordPress Portfolio – WordPress Portfolio Plugin Plugin \<= 2.8.10 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/radiustheme
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.