11 matches found
CVE-2025-30911
Exploit for CVE-2025-30911 โ WordPress RomethemeKit = 1.5.4 This script exploits a critical vulnerability in the RomethemeKit For Elementor WordPress plugin = v1.5.4 that allows authenticated arbitrary plugin installation and activation , potentially leading to Remote Code Execution RCE. ๐ ๏ธ...
CVE-2024-33919
Missing Authorization vulnerability in Rometheme RomethemeKit For Elementor.This issue affects RomethemeKit For Elementor: from n/a through 1.4.1...
CVE-2025-30911
Improper Control of Generation of Code 'Code Injection' vulnerability in Rometheme RTMKit rometheme-for-elementor allows Command Injection.This issue affects RTMKit: from n/a through = 1.5.4...
PT-2025-14068 ยท Unknown ยท Romethemekit For Elementor
Name of the Vulnerable Software and Affected Versions: RomethemeKit For Elementor versions n/a through 1.5.4 Description: The issue is related to an Improper Control of Generation of Code 'Code Injection' vulnerability, which allows Command Injection. This problem affects over 30,000 active sites...
CVE-2024-10326: Missing Authorization
The RomethemeKit For Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveoptions and resetwidgets functions in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with...
CVE-2025-24743
CVE-2025-24743 affects the WordPress plugin RomethemeKit For Elementor (RomethemeKit For Elementor), with versions up to 1.5.2 vulnerable due to Missing Authorization. The CVE is scored with a base CVSSv3.1 value of 4.3 (Network, Low privileges required, No user interaction; Confidentiality/Avail...
CVE-2024-10324: Exposure of Sensitive Information Through Metadata
The RomethemeKit For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.5.2 via the registercontrols function in widgets/offcanvas-rometheme.php. This makes it possible for authenticated attackers, with Contributor-level access a...
PT-2024-32683 ยท Unknown ยท Romethemekit For Elementor
Name of the Vulnerable Software and Affected Versions: RomethemeKit For Elementor versions 1.5.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendation...
WordPress RomethemeKit For Elementor Plugin <= 1.5.0 is vulnerable to Cross Site Scripting (XSS)
Software RomethemeKit For Elementor Type Plugin Vulnerable versions = 1.5.0 Fixed in 1.5.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47626 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 06f4df0cfc5f Credits Khalid Yusuf Required...
WordPress plugin RomethemeKit For Elementor ๅฎๅ จๆผๆด
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-33919: Missing Authorization
Missing Authorization vulnerability in Rometheme RomethemeKit For Elementor.This issue affects RomethemeKit For Elementor: from n/a through 1.4.1...