Description
Unauthenticated Cross Site Scripting (XSS) in RTMKit <= 2.1.5 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| rometheme | RTMKit | ≤ 2.1.5 | — |
High · 7.1
CVE-2026-84763
EUVD-2026-70581GHSA-9rrr-fvrw-j74h
WordPress RTMKit plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability
Published Sep 3, 2026 · Updated Sep 7, 2026 · Assigned by Patchstack