RadiusTheme

Records74All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high27CVSS 7.0–8.9

Exploited now

RadiusTheme records in CISA KEV

No RadiusTheme vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Classified Listing 8 records MEDIUM The Post Grid 6 records MEDIUM Team - Wordpress Team Members Showcase 2 records MEDIUM Testimonial Slider And Showcase 2 records MEDIUM Classified Listing Store & Membership 1 record MEDIUM Classima 1 record MEDIUM Classima Core 1 record MEDIUM Logo Slider And Showcase 1 record LOW

Records

6 records in The Post Grid · all components

TI-2024-03390 CVE-2024-3635 · GHSA-v46p-p3v7-38cg

The Post Grid < 7.5.0 - Editor+ Stored XSS via Grid Creation

MEDIUM 55

The Post Grid WordPress plugin before 7.5.0 does not sanitise and escape some of its Grid settings, which could allow high privilege users such as Editor and above to perform Stored Cross-Site Scripting attacks even when…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00311 Published 2024-09-30 Fixed in 7.5.0 CWE-79

TI-2023-20822 CVE-2023-39923 · GHSA-v39x-ggv9-8449

WordPress The Post Grid Plugin <= 7.2.7 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme The Post Grid plugin <= 7.2.7 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00252 Published 2023-10-03 No fix listed CWE-352

TI-2022-23197 CVE-2022-46853 · GHSA-8ccc-c3cg-4q5q

WordPress The Post Grid Plugin <= 5.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme The Post Grid plugin <= 5.0.4 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-05-23 No fix listed CWE-352

TI-2024-23608 CVE-2024-35739 · GHSA-mvp5-93x2-533f

WordPress The Post Grid plugin <= 7.7.1 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00279 Published 2024-06-08 No fix listed CWE-79

TI-2024-01332 CVE-2024-1427 · GHSA-2g7h-4jrf-ppfh

The Post Grid <= 7.7.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via section title tag

LOW 28

The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the section title tag attribute in all versions up to, and including…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00341 Published 2024-07-02 No fix listed CWE-79

TI-2024-06874 CVE-2024-7418 · GHSA-w95j-wcx9-78cv

The Post Grid <= 7.7.11 - Authenticated (Contributor+) Information Disclosure

LOW 21

The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.7.11 via the post_query_guten…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00495 Published 2024-08-29 No fix listed CWE-200

Open these records in search →