RTMKit
Rometheme
Developer
2.2.1
Latest version
40,000
Installations
No date
Last updated
Vulnerability history
0 present
20 patched
5 Mitigation rules
- Cross Site Request Forgery (CSRF) vulnerability<= 2.1.510/09/2026
- Authenticated (Author+) Local File Inclusion vulnerability<= 2.0.209/09/2026
- Authenticated (Contributor+) Limited Local File Inclusion vulnerability<= 2.0.709/09/2026
- Cross Site Scripting (XSS) vulnerability<= 2.1.502/09/2026
- PHP Object Injection vulnerability<= 2.1.502/09/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.0.702/07/2026
- Authenticated (Contributor+) Missing Authorization to Arbitrary Form Submission Access vulnerability<= 2.0.715/06/2026
- Authenticated (Author+) Missing Authorization to Widget Configuration Modification vulnerability<= 2.0.212/05/2026
- Reflected Cross-Site Scripting via 'themebuilder' Parameter vulnerability<= 1.6.811/03/2026
- Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates vulnerability<= 1.5.231/12/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Repeater Block Attribute vulnerability<= 1.6.517/11/2025
- Arbitrary File Upload vulnerability<= 1.6.518/10/2025
- Cross Site Scripting (XSS) vulnerability<= 1.6.005/06/2025
- Arbitrary Plugin Installation/Activation to RCE vulnerability<= 1.5.427/03/2025
- Missing Authorization in save_options and reset_widgets vulnerability<= 1.5.308/03/2025
- Insecure Direct Object References (IDOR) vulnerability<= 1.6.714/02/2025
- Broken Access Control vulnerability<= 1.5.224/01/2025
- Cross Site Scripting (XSS) vulnerability<= 1.5.030/09/2024
- Broken Access Control vulnerability<= 1.4.129/04/2024
- Cross Site Scripting (XSS) vulnerability<= 1.4.122/04/2024