Read the docs

RadiusTheme

Records74All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high27CVSS 7.0–8.9

Exploited now

RadiusTheme records in CISA KEV

No RadiusTheme vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

8 records in Classified Listing · all components

Priority MEDIUM 60

The Classima WordPress theme before 2.1.11 and some of its required plugins (Classified Listing before 2.2.14, Classified Listing Pro before 2.0.20, Classified Listing Store & Membership before 1.4.20 and Classima Core b…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00618 Published 2022-09-16 Fixed in 2.2.14, 2.0.20 +3 CWE-79
Priority LOW 36

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on the rtcl_import_location() rtcl_im…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00547 Published 2024-04-09 No fix listed CWE-862
Priority LOW 30

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.0.4 via the rtcl_taxonomy_settings_export f…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00355 Published 2025-02-25 No fix listed CWE-200
Priority LOW 28

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions like export_forms(), import_forms(), up…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00292 Published 2024-09-13 No fix listed CWE-862
Priority LOW 28

The Classified Listing Pro WordPress plugin before 2.0.20 does not escape a generated URL before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00701 Published 2022-09-16 Fixed in 2.0.20 CWE-79
Priority LOW 20

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the rtcl_fb_gallery_image_delete AJAX action in all…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00362 Published 2024-04-25 No fix listed CWE-862
Open these records in search →