Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
RomethemeRomethemekit For Elementor

7 matches found

CVE
CVE•added 2025/04/01 6:15 a.m.•57 views

CVE-2025-30911

Improper Control of Generation of Code ('Code Injection') vulnerability in Rometheme RomethemeKit For Elementor allows Command Injection. This issue affects RomethemeKit For Elementor: from n/a through 1.5.4.

9.9CVSS9.7AI score0.00336EPSS
CVE
CVE•added 2024/05/03 9:15 a.m.•48 views

CVE-2024-33919

Missing Authorization vulnerability in Rometheme RomethemeKit For Elementor.This issue affects RomethemeKit For Elementor: from n/a through 1.4.1.

6.5CVSS9.3AI score0.00055EPSS
CVE
CVE•added 2024/04/24 9:15 a.m.•46 views

CVE-2024-32956

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rometheme RomethemeKit For Elementor allows Stored XSS.This issue affects RomethemeKit For Elementor: from n/a through 1.4.1.

6.5CVSS6.6AI score0.00062EPSS
CVE
CVE•added 2025/01/27 3:15 p.m.•39 views

CVE-2025-24743

Missing Authorization vulnerability in Rometheme RomethemeKit For Elementor. This issue affects RomethemeKit For Elementor: from n/a through 1.5.2.

4.3CVSS7AI score0.00051EPSS
CVE
CVE•added 2025/01/24 2:15 p.m.•37 views

CVE-2024-10324

The RomethemeKit For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.5.2 via the register_controls function in widgets/offcanvas-rometheme.php. This makes it possible for authenticated attackers, with Contributor-level access an...

4.3CVSS4.5AI score0.00052EPSS
CVE
CVE•added 2025/03/08 1:15 p.m.•37 views

CVE-2024-10326

The RomethemeKit For Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_options and reset_widgets functions in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with Subscriber-l...

4.3CVSS4.3AI score0.00017EPSS
CVE
CVE•added 2024/10/05 2:15 p.m.•37 views

CVE-2024-47626

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Rometheme RomethemeKit For Elementor allows Stored XSS.This issue affects RomethemeKit For Elementor: from n/a through 1.5.0.

6.5CVSS6.7AI score0.00076EPSS