RO
Vendor
rometheme
26
CVEs
0
On KEV
0
New 30D
Products
RT9.9
RTMKit
rometheme
19 CVEs0 on KEV0 new
RF5.3
RomethemeForm For Elementor
rometheme
3 CVEs0 on KEV0 new
RF6.5
RomethemeKit For Elementor
Rometheme
3 CVEs0 on KEV0 new
RB5.3
RTMForm Builder
rometheme
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-62133 | RT RTMKit rometheme | 5.4 | Sep 11 | WordPress RTMKit plugin <= 2.1.5 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2026-84763 | RT RTMKit rometheme | 7.1 | Sep 3 | WordPress RTMKit plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-84752 | RT RTMKit rometheme | 8.8 | Sep 3 | WordPress RTMKit plugin <= 2.1.5 - PHP Object Injection vulnerability |
| CVE-2026-74003 | RF RomethemeForm For Elementor rometheme | 4.3 | Aug 18 | WordPress RomethemeForm For Elementor plugin <= 1.2.6 - Broken Access Control vulnerability |
| CVE-2026-5137 | RT RTMKit rometheme | 4.3 | Jul 3 | RTMKit <= 2.0.7 - Authenticated (Contributor+) Limited Local File Inclusion via 'template' Parameter |
| CVE-2026-8351 | RT RTMKit rometheme | 6.4 | Jul 3 | RTMKit <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Heading Widget 'Background Text' Parameter |
| CVE-2026-5149 | RT RTMKit rometheme | 6.5 | Jun 16 | RTMKit <= 2.0.7 - Authenticated (Contributor+) Missing Authorization to Arbitrary Form Submission Access via 'entries_id' Parameter |
| CVE-2026-3426 | RT RTMKit rometheme | 4.3 | May 13 | RTMKit Addons for Elementor <= 2.0.2 - Authenticated (Author+) Missing Authorization to Widget Configuration Modification |
| CVE-2026-3425 | RT RTMKit rometheme | 8.8 | May 13 | RTMKit Addons for Elementor <= 2.0.2 - Authenticated (Author+) Local File Inclusion via 'path' |
| CVE-2025-12473 | RT RTMKit rometheme | 6.1 | Mar 11 | RTMKit <= 1.6.8 - Reflected Cross-Site Scripting via 'themebuilder' Parameter |
| CVE-2025-8609 | RT RTMKit rometheme | 6.4 | Nov 18 | RTMKit Addons <= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Repeater Block Attribute |
| CVE-2025-62065 | RT RTMKit Rometheme | 9.9 | Nov 6 | WordPress RTMKit plugin <= 1.6.5 - Arbitrary File Upload vulnerability |
| CVE-2025-64283 | RT RTMKit Rometheme | 6.5 | Oct 29 | WordPress RTMKit plugin <= 1.6.7 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2025-49235 | RT RTMKit Rometheme | 6.5 | Jun 6 | WordPress RTMKit Addons for Elementor plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-30911 | RT RTMKit Rometheme | 9.9 | Apr 1 | WordPress RomethemeKit For Elementor plugin <= 1.5.4 - Arbitrary Plugin Installation/Activation to RCE vulnerability |
| CVE-2024-10326 | RT RTMKit rometheme | 4.3 | Mar 8 | RomethemeKit For Elementor <= 1.5.3 - Missing Authorization in save_options and reset_widgets |
| CVE-2025-24743 | RT RTMKit Rometheme | 4.3 | Jan 27 | WordPress RomethemeKit For Elementor plugin <= 1.5.2 - Broken Access Control vulnerability |
| CVE-2024-10324 | RT RTMKit rometheme | 4.3 | Jan 24 | RomethemeKit For Elementor <= 1.5.2 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates |
| CVE-2024-47626 | RT RTMKit Rometheme | 6.5 | Oct 5 | WordPress RomethemeKit For Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-32727 | RF RomethemeForm For Elementor Rometheme | 5.3 | Jun 9 | WordPress RomethemeForm For Elementor plugin <= 1.1.2 - Broken Access Control vulnerability |
| CVE-2023-6325 | RB RTMForm Builder rometheme | 5.3 | May 23 | RomethemeForm For Elementor <= 1.1.5 - Missing Authorization via export_entries, rtformnewform, and rtformupdate |
| CVE-2024-33919 | RF RomethemeKit For Elementor Rometheme | 6.5 | May 3 | WordPress RomethemeKit For Elementor plugin <= 1.4.1 - Broken Access Control vulnerability |
| CVE-2024-32956 | RT RTMKit Rometheme | 6.5 | Apr 24 | WordPress RomethemeKit For Elementor plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability |