Approved changes feed: RSS · Atom

cpe:2.3:a:stmcan:rt-theme_18_|_extensions:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorStmcan (55c69e9e-ef5e-5085-841a-1ad4ad13a5b5)
ProductRt Theme 18 | Extensions (8eb10b04-9112-50a0-aa02-2a88869568db)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-57745 vulnerable 2026-07-29 01:03:16.138548 WordPress RT-Theme 18 | Extensions plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Reflected XSS.This issue affects RT-Theme 18 | Extensions: from n/a through <= 2.5.
Published: 2026-07-13T08:41:25.029Z
Updated: 2026-07-13T13:53:26.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57744 vulnerable 2026-07-29 01:03:16.138268 WordPress RT-Theme 18 | Extensions plugin <= 2.5 - PHP Object Injection vulnerability
CRITICAL (9.8)
Deserialization of Untrusted Data vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Object Injection.This issue affects RT-Theme 18 | Extensions: from n/a through <= 2.5.
Published: 2026-07-13T08:41:25.019Z
Updated: 2026-07-13T13:27:11.053Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57743 vulnerable 2026-07-29 01:03:16.137905 WordPress RT-Theme 18 | Extensions plugin <= 2.5 - Local File Inclusion vulnerability
HIGH (8.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows PHP Local File Inclusion.This issue affects RT-Theme 18 | Extensions: from n/a through <= 2.5.
Published: 2026-07-13T08:41:25.010Z
Updated: 2026-07-13T14:38:35.637Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39711 vulnerable 2026-06-08 08:01:16.852085 WordPress RT-Theme 18 | Extensions plugin <= 2.5 - Sensitive Data Exposure vulnerability
MEDIUM (5.3)
Insertion of Sensitive Information Into Sent Data vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Retrieve Embedded Sensitive Data.This issue affects RT-Theme 18 | Extensions: from n/a through <= 2.5.
Published: 2026-04-08T08:30:48.755Z
Updated: 2026-04-29T09:52:04.616Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39710 vulnerable 2026-06-08 08:01:16.851621 WordPress RT-Theme 18 | Extensions plugin <= 2.5 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Cross Site Request Forgery.This issue affects RT-Theme 18 | Extensions: from n/a through <= 2.5.
Published: 2026-04-08T08:30:48.574Z
Updated: 2026-04-29T09:52:04.494Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32288 vulnerable 2026-06-08 07:18:59.420127 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.