Description
Contributor PHP Object Injection in RTMKit <= 2.1.5 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| rometheme | RTMKit | ≤ 2.1.5 | — |
High · 8.8
CVE-2026-84752
EUVD-2026-70590GHSA-7cm2-qx3m-m8hw
WordPress RTMKit plugin <= 2.1.5 - PHP Object Injection vulnerability
Published Sep 3, 2026 · Updated Sep 3, 2026 · Assigned by Patchstack