Approved changes feed: RSS · Atom

cpe:2.3:a:radiustheme:metro:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRadiustheme (0725c1b0-e09b-5bd8-8b3b-7e2c6e70aedf)
ProductMetro (f56665f5-bd7a-55af-bb96-25dfc04eb525)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-27383 vulnerable 2026-06-03 15:18:06.427667 WordPress Metro theme <= 2.13 - Local File Inclusion vulnerability
HIGH (8.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Metro metro allows PHP Local File Inclusion.This issue affects Metro: from n/a through <= 2.13.
Published: 2026-03-05T05:53:58.330Z
Updated: 2026-04-28T16:15:02.575Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27382 vulnerable 2026-06-03 15:18:06.427317 WordPress Metro theme <= 2.13 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme Metro metro allows DOM-Based XSS.This issue affects Metro: from n/a through <= 2.13.
Published: 2026-03-05T05:53:58.133Z
Updated: 2026-04-28T16:15:02.818Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.