WordPress security by component
RT-Theme 18 | Extensions
Plugin description
RT-Theme 18 | Extensions is a WordPress component with 6 published CVE records in this archive. The latest tracked vulnerability was published Jul 13, 2026; the highest CVE/CNA score is 9.8.
Plugin slug:
rt18-extensionsLatest vulnerability
CVE-2026-57745: RT-Theme 18 | Extensions: Cross-site scripting
RT-Theme 18 | Extensions is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 2.5.
| Safe version |
|
||
|---|---|---|---|
| Jul 13, 2026 |
CVE-2026-57745
RT-Theme 18 | Extensions: Cross-site scripting
RT-Theme 18 | Extensions is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 2.5.
|
> 2.5 |
CVE7.1
NVDPending
|
| Jul 13, 2026 |
CVE-2026-57744
RT-Theme 18 | Extensions: Code execution
RT-Theme 18 | Extensions is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account. The published affected range is <= 2.5.
|
> 2.5 |
CVE9.8
NVDPending
|
| Jul 13, 2026 |
CVE-2026-57743
RT-Theme 18 | Extensions: Filesystem traversal
RT-Theme 18 | Extensions is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server. The published affected range is <= 2.5.
|
> 2.5 |
CVE8.1
NVDPending
|
| Apr 08, 2026 |
CVE-2026-39711
RT-Theme 18 | Extensions: A security weakness
RT-Theme 18 | Extensions is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 2.5.
|
> 2.5 |
CVE5.3
NVDPending
|
| Apr 08, 2026 |
CVE-2026-39710
RT-Theme 18 | Extensions: Cross-site request forgery
RT-Theme 18 | Extensions is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request. The published affected range is <= 2.5.
|
> 2.5 |
CVE5.4
NVDPending
|
| Aug 14, 2025 |
CVE-2025-32288
RT-Theme 18 | Extensions: Filesystem traversal
RT-Theme 18 | Extensions is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE7.5
NVDPending
|