EUVD-2025-36611

Authorization Bypass Through User-Controlled Key vulnerability in Rometheme RTMKit rometheme-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RTMKit: from n/a through = 1.6.7...

PT-2025-45320

Name of the Vulnerable Software and Affected Versions RTMKit versions prior to 1.6.6 Description The RTMKit plugin for WordPress allows authenticated attackers with Contributor-level access and above to upload arbitrary files to the server. This occurs due to missing file type validation, which...

CVE-2025-30911

Improper Control of Generation of Code 'Code Injection' vulnerability in Rometheme RTMKit rometheme-for-elementor allows Command Injection.This issue affects RTMKit: from n/a through = 1.5.4...

PT-2025-5555 · Rometheme · Romethemekit For Elementor

Name of the Vulnerable Software and Affected Versions: RomethemeKit for Elementor versions 1.5.2 and earlier Description: The issue is related to a lack of authorization in Rometheme RomethemeKit for Elementor. Recommendations: For RomethemeKit for Elementor versions 1.5.2 and earlier, update to ...