Skip to content
OpenAdvisories

Product · rometheme

RTMKit

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-62133

    WordPress RTMKit plugin <= 2.1.5 - Cross Site Request Forgery (CSRF) vulnerability

    Subscriber Cross Site Request Forgery (CSRF) in RTMKit <= 2.1.5 versions.

    rometheme RTMKit
  • Medium 4.3
    CVE-2026-5137

    RTMKit <= 2.0.7 - Authenticated (Contributor+) Limited Local File Inclusion via 'template' Parameter

    The RTMKit (rometheme-for-elementor) plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.0.7 This is due to insufficient path validation on the 'template' parameter in the render_templates AJAX endpoint, which is use…

    rometheme RTMKit Web / CMS
  • Medium 6.4
    CVE-2026-8351

    RTMKit <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Heading Widget 'Background Text' Parameter

    The RTMKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Advanced Heading widget's 'Background Text' parameter in versions up to, and including, 2.0.7 This is due to insufficient output escaping on the 'background_text_heading' set…

    rometheme RTMKit Web / CMS
  • Medium 6.5
    CVE-2026-5149

    RTMKit <= 2.0.7 - Authenticated (Contributor+) Missing Authorization to Arbitrary Form Submission Access via 'entries_id' Parameter

    The RTMKit plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 2.0.7 This is due to the get_submission_content AJAX endpoint lacking a capability check to verify that a user has permission to access the requeste…

    rometheme RTMKit Web / CMS
  • Medium 4.3
    CVE-2026-3426

    RTMKit Addons for Elementor <= 2.0.2 - Authenticated (Author+) Missing Authorization to Widget Configuration Modification

    The RTMKit Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the save_widget() and reset_all_widgets() functions in all versions up to, and including, 2.0.2. This makes it possible…

    rometheme RTMKit Web / CMS
  • Medium 6.1
    CVE-2025-12473

    RTMKit <= 1.6.8 - Reflected Cross-Site Scripting via 'themebuilder' Parameter

    The RTMKit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'themebuilder' parameter in all versions up to, and including, 1.6.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…

    rometheme RTMKit Web / CMS
  • Medium 6.4
    CVE-2025-8609

    RTMKit Addons <= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Repeater Block Attribute

    The RTMKit Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Accordion Block's attributes in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping on user supp…

    rometheme RTMKit Web / CMS
  • Medium 6.5
    CVE-2025-64283

    WordPress RTMKit plugin <= 1.6.7 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in Rometheme RTMKit rometheme-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RTMKit: from n/a through <= 1.6.7.

    rometheme RTMKit rtkit Azure Linux
  • Medium 6.5
    CVE-2025-49235

    WordPress RTMKit Addons for Elementor plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rometheme RTMKit rometheme-for-elementor allows Stored XSS.This issue affects RTMKit: from n/a through <= 1.6.0.

    rometheme RTMKit
  • Medium 4.3
    CVE-2024-10326

    RomethemeKit For Elementor <= 1.5.3 - Missing Authorization in save_options and reset_widgets

    The RomethemeKit For Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_options and reset_widgets functions in all versions up to, and including, 1.5.3. This makes it possible for au…

    rometheme RTMKit Web / CMS
  • Medium 4.3
    CVE-2025-24743

    WordPress RomethemeKit For Elementor plugin <= 1.5.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Rometheme RTMKit rometheme-for-elementor.This issue affects RTMKit: from n/a through <= 1.5.2.

    rometheme RTMKit
  • Medium 4.3
    CVE-2024-10324

    RomethemeKit For Elementor <= 1.5.2 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates

    The RomethemeKit For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.5.2 via the register_controls function in widgets/offcanvas-rometheme.php. This makes it possible for authenticated att…

    rometheme RTMKit Web / CMS
  • Medium 6.5
    CVE-2024-47626

    WordPress RomethemeKit For Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rometheme RTMKit rometheme-for-elementor allows Stored XSS.This issue affects RTMKit: from n/a through <= 1.5.0.

    rometheme RTMKit
  • Medium 6.5
    CVE-2024-32956

    WordPress RomethemeKit For Elementor plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rometheme RTMKit rometheme-for-elementor.This issue affects RTMKit: from n/a through <= 1.4.1.

    rometheme RTMKit