RadiusTheme has 6 CVEs on record. Disclosure cadence is accelerating: 6 in the last 90 days against 0 in the 90 before. The busiest recent month was September 2026 with 4. The median CVSS is 6.8 (medium), with 1 rated critical. None have a confirmed exploitation report. The most common weakness class is CWE-79 (4). Most affected products: the-post-grid (2), classified-listing (1), radius-booking (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.8
- Publish → KEV
- —
- Last 90 days
- 6 prev 0
Products
- the-post-grid 2
- classified-listing 1
- radius-booking 1
- review-schema 1
- tlp-food-menu 1
Worst active — by depth score
CVE-2026-39764Critical· 9.3Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services <= 1.0.19 versions.51CVE-2026-42709High· 7.1Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions.39CVE-2026-96351High· 7.1Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions.39CVE-2026-94680Medium· 6.5Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.36CVE-2026-94671Medium· 6.5Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.36
RadiusTheme vulnerabilities
CVEs affecting RadiusTheme, newest first. Open any entry for full detail, references, and exploit status.
6 CVEsRSS
CVE-2026-42709High· 7.1Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions.
CVE-2026-39764Critical· 9.3Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services <= 1.0.19 versions.
Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services <= 1.0.19 versions.
CVE-2026-96351High· 7.1Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions.
CVE-2026-97282Medium· 5.3Unauthenticated Insecure Direct Object References (IDOR) in Review Schema <= 3.1.0 versions.
Unauthenticated Insecure Direct Object References (IDOR) in Review Schema <= 3.1.0 versions.
CVE-2026-94671Medium· 6.5Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.
Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.
CVE-2026-94680Medium· 6.5Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.
Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.