Vulnerabilities

TI-2026-41568 CVE-2026-57745 · GHSA-vmvq-4mm3-7wv5

WordPress RT-Theme 18 | Extensions plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Reflected XSS.This issue affects RT-Theme 18 | Extensions: from…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-07-13 No fix listed CWE-79

TI-2026-41567 CVE-2026-57744 · GHSA-7fcw-pr2j-6ff2

WordPress RT-Theme 18 | Extensions plugin <= 2.5 - PHP Object Injection vulnerability

MEDIUM 50

Deserialization of Untrusted Data vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Object Injection.This issue affects RT-Theme 18 | Extensions: from n/a through <= 2.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00564 Published 2026-07-13 No fix listed CWE-502

TI-2026-41566 CVE-2026-57743 · GHSA-q36p-f24m-rv4h

WordPress RT-Theme 18 | Extensions plugin <= 2.5 - Local File Inclusion vulnerability

LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows PHP Local File Inclusion.This issue affects…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00557 Published 2026-07-13 No fix listed CWE-98

TI-2026-28680 CVE-2026-39711 · GHSA-hjp2-9xx7-v66x

WordPress RT-Theme 18 | Extensions plugin <= 2.5 - Sensitive Data Exposure vulnerability

LOW 30

Insertion of Sensitive Information Into Sent Data vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Retrieve Embedded Sensitive Data.This issue affects RT-Theme 18 | Extensions: from n/a through <=…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0027 Published 2026-04-08 No fix listed CWE-201

TI-2026-28679 CVE-2026-39710 · GHSA-h4g3-j2wx-7hjc

WordPress RT-Theme 18 | Extensions plugin <= 2.5 - Cross Site Request Forgery (CSRF) vulnerability

LOW 23

Cross-Site Request Forgery (CSRF) vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Cross Site Request Forgery.This issue affects RT-Theme 18 | Extensions: from n/a through <= 2.5.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00099 Published 2026-04-08 No fix listed CWE-352

TI-2026-20203 CVE-2026-25018 · GHSA-2rx9-c484-mx43

WordPress NaturaLife Extensions plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stmcan NaturaLife Extensions naturalife-extensions allows Reflected XSS.This issue affects NaturaLife Extensions: from…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00182 Published 2026-03-25 No fix listed CWE-79

TI-2026-20202 CVE-2026-25017 · GHSA-v44h-w67q-qjc7

WordPress NaturaLife Extensions plugin <= 2.1 - Local File Inclusion vulnerability

LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in stmcan NaturaLife Extensions naturalife-extensions allows PHP Local File Inclusion.This issue affec…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00419 Published 2026-03-25 No fix listed CWE-98

TI-2025-23385 CVE-2025-32288 · GHSA-p6x5-mh8v-xpm2

WordPress RT-Theme 18 | Extensions plugin <= 2.4 - Local File Inclusion Vulnerability

LOW 34

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows PHP Local File Inclusion.This issue affects…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00611 Published 2025-08-14 No fix listed CWE-98

Vulnerabilities

Filters