RT-Theme 18 Responsive WordPress Theme

RT-Theme 18 Responsive WordPress Theme has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; 1 is fixed and 5 remain unpatched as of September 2026. Their average CVSS score is 7.0, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 2 high. 2026 was the busiest year with 5 disclosures.

The most common weakness is PHP Remote File Inclusion, behind 2 of the records (33%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting.

1 of the records (17%) have a vendor fix, while 5 remain unpatched. The oldest unresolved one dates back to 2026.

All of these findings were reported by Bonds.

Strategic Overview

Avg CVSSMedium

7.0/ 10

Patch Coverage17%

Open

Fixed

Get automatic notifications for all RT-Theme 18 Responsive WordPress Theme vulnerabilities before they are exploited.

Most severe open issueCVSS 8.1CVE-2026-57743

RT-Theme 18 Responsive WordPress Theme <= 2.5 - Unauthenticated Local File Inclusion

Read the full analysis

Vulnerability Records

6 records


2026-07-06 00:00	RT-Theme 18 Responsive WordPress Theme <= 2.5 - Unauthenticated Local File Inclusion RT-Theme 18 Responsive WordPress Theme <= 2.5	`CVE-2026-57743`	8.1 High	Bonds	No
2026-07-06 00:00	RT-Theme 18 Responsive WordPress Theme <= 2.5 - Unauthenticated PHP Object Injection RT-Theme 18 Responsive WordPress Theme <= 2.5	`CVE-2026-57744`	8.1 High	Bonds	No
2026-07-06 00:00	RT-Theme 18 Responsive WordPress Theme <= 2.5 - Reflected Cross-Site Scripting RT-Theme 18 Responsive WordPress Theme <= 2.5	`CVE-2026-57745`	6.1 Medium	Bonds	No
2026-03-02 00:00	RT-Theme 18 \| Extensions <= 2.5 - Unauthenticated Information Exposure RT-Theme 18 Responsive WordPress Theme <= 2.5	`CVE-2026-39711`	5.3 Medium	Bonds	No
2026-03-02 00:00	RT-Theme 18 \| Extensions <= 2.5 - Cross-Site Request Forgery RT-Theme 18 Responsive WordPress Theme <= 2.5	`CVE-2026-39710`	4.3 Medium	Bonds	No
2025-07-28 00:00	RT-Theme 18 \| Extensions <= 2.4 - Unauthenticated Local File Inclusion RT-Theme 18 Responsive WordPress Theme <= 2.4	`CVE-2025-32288`	9.8 Critical	Bonds	Yes

Showing 1–6 of 6 reports