Skip to content
OpenAdvisories

Product · rometheme

RTMKit

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2026-84763

    WordPress RTMKit plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in RTMKit <= 2.1.5 versions.

    rometheme RTMKit
  • High 8.8
    CVE-2026-84752

    WordPress RTMKit plugin <= 2.1.5 - PHP Object Injection vulnerability

    Contributor PHP Object Injection in RTMKit <= 2.1.5 versions.

    rometheme RTMKit
  • High 8.8
    CVE-2026-3425

    RTMKit Addons for Elementor <= 2.0.2 - Authenticated (Author+) Local File Inclusion via 'path'

    The RTMKit Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.2 via the 'path' parameter of the 'get_content' AJAX action. This makes it possible for authenticated attackers, with Author-l…

    rometheme RTMKit Web / CMS