Rometheme vulnerabilities
23 published CVEs name Rometheme among the affected products.
- 23Published CVEs23 of them scored
- 11Last 12 monthspublished in the last year
- 2Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-62133
WordPress RTMKit plugin <= 2.1.5 - Cross Site Request Forgery (CSRF) vulnerability
rometheme · RTMKit
Medium5.4 - CVE-2026-84763
WordPress RTMKit plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability
rometheme · RTMKit
High7.1 - CVE-2026-84752
WordPress RTMKit plugin <= 2.1.5 - PHP Object Injection vulnerability
rometheme · RTMKit
High8.8 - CVE-2026-74003
WordPress RomethemeForm For Elementor plugin <= 1.2.6 - Broken Access Control vulnerability
rometheme · RomethemeForm For Elementor
Medium4.3 - CVE-2026-5137
RTMKit <= 2.0.7 - Authenticated (Contributor+) Limited Local File Inclusion via 'template' Parameter
rometheme · RTMKit
Medium4.3 - CVE-2026-8351
RTMKit <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Heading Widget 'Background Text' Parameter
rometheme · RTMKit
Medium6.4 - CVE-2026-5149
RTMKit <= 2.0.7 - Authenticated (Contributor+) Missing Authorization to Arbitrary Form Submission Access via 'entries_id' Parameter
rometheme · RTMKit
Medium6.5 - CVE-2026-3426
RTMKit Addons for Elementor <= 2.0.2 - Authenticated (Author+) Missing Authorization to Widget Configuration Modification
rometheme · RTMKit
Medium4.3 - CVE-2026-3425
RTMKit Addons for Elementor <= 2.0.2 - Authenticated (Author+) Local File Inclusion via 'path'
rometheme · RTMKit
High8.8 - CVE-2025-12473
RTMKit <= 1.6.8 - Reflected Cross-Site Scripting via 'themebuilder' Parameter
rometheme · RTMKit
Medium6.1