Description
Subscriber Cross Site Request Forgery (CSRF) in RTMKit <= 2.1.5 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| rometheme | RTMKit | ≤ 2.1.5 | — |
Medium · 5.4
CVE-2026-62133
EUVD-2026-76204GHSA-37vc-h63p-f529
WordPress RTMKit plugin <= 2.1.5 - Cross Site Request Forgery (CSRF) vulnerability
Published Sep 11, 2026 · Updated Sep 11, 2026 · Assigned by Patchstack