agentprime: rometheme-rtmkitEvery new CVE for rometheme-rtmkit.https://agentprime.io/CVE-2026-62133: WordPress RTMKit plugin <= 2.1.5 - Cross Site Request Forgery (CSRF) vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62133/https://agentprime.io/advisories/CVE-2026-62133/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 18:12:10 GMTCVECVE-2026-84763: WordPress RTMKit plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerabilityhttps://agentprime.io/advisories/CVE-2026-84763/https://agentprime.io/advisories/CVE-2026-84763/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 16:31:48 GMTCVECVE-2026-84752: WordPress RTMKit plugin <= 2.1.5 - PHP Object Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2026-84752/https://agentprime.io/advisories/CVE-2026-84752/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 16:31:42 GMTCVECVE-2026-5137: RTMKit <= 2.0.7 - Authenticated (Contributor+) Limited Local File Inclusion via 'template' Parameterhttps://agentprime.io/advisories/CVE-2026-5137/https://agentprime.io/advisories/CVE-2026-5137/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 09:31:52 GMTCVECVE-2026-8351: RTMKit <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Heading Widget 'Background Text' Parameterhttps://agentprime.io/advisories/CVE-2026-8351/https://agentprime.io/advisories/CVE-2026-8351/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 06:50:10 GMTCVECVE-2026-5149: RTMKit <= 2.0.7 - Authenticated (Contributor+) Missing Authorization to Arbitrary Form Submission Access via 'entries_id' Parameterhttps://agentprime.io/advisories/CVE-2026-5149/https://agentprime.io/advisories/CVE-2026-5149/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Jun 2026 05:33:32 GMTCVECVE-2026-3426: RTMKit Addons for Elementor <= 2.0.2 - Authenticated (Author+) Missing Authorization to Widget Configuration Modificationhttps://agentprime.io/advisories/CVE-2026-3426/https://agentprime.io/advisories/CVE-2026-3426/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 12:29:52 GMTCVECVE-2026-3425: RTMKit Addons for Elementor <= 2.0.2 - Authenticated (Author+) Local File Inclusion via 'path'https://agentprime.io/advisories/CVE-2026-3425/https://agentprime.io/advisories/CVE-2026-3425/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 12:29:52 GMTCVECVE-2025-12473: RTMKit <= 1.6.8 - Reflected Cross-Site Scripting via 'themebuilder' Parameterhttps://agentprime.io/advisories/CVE-2025-12473/https://agentprime.io/advisories/CVE-2025-12473/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 01:22:05 GMTCVECVE-2025-8609: RTMKit Addons <= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Repeater Block Attributehttps://agentprime.io/advisories/CVE-2025-8609/https://agentprime.io/advisories/CVE-2025-8609/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Nov 2025 08:27:35 GMTCVECVE-2025-62065: WordPress RTMKit plugin <= 1.6.5 - Arbitrary File Upload vulnerabilityhttps://agentprime.io/advisories/CVE-2025-62065/https://agentprime.io/advisories/CVE-2025-62065/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Nov 2025 15:55:53 GMTCVEcriticalCVE-2025-64283: WordPress RTMKit plugin <= 1.6.7 - Insecure Direct Object References (IDOR) vulnerabilityhttps://agentprime.io/advisories/CVE-2025-64283/https://agentprime.io/advisories/CVE-2025-64283/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Oct 2025 08:38:12 GMTCVECVE-2025-49235: WordPress RTMKit Addons for Elementor plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerabilityhttps://agentprime.io/advisories/CVE-2025-49235/https://agentprime.io/advisories/CVE-2025-49235/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Jun 2025 12:53:31 GMTCVECVE-2025-30911: WordPress RomethemeKit For Elementor plugin <= 1.5.4 - Arbitrary Plugin Installation/Activation to RCE vulnerabilityhttps://agentprime.io/advisories/CVE-2025-30911/https://agentprime.io/advisories/CVE-2025-30911/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Apr 2025 05:31:40 GMTCVEcriticalCVE-2024-10326: RomethemeKit For Elementor <= 1.5.3 - Missing Authorization in save_options and reset_widgetshttps://agentprime.io/advisories/CVE-2024-10326/https://agentprime.io/advisories/CVE-2024-10326/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 08 Mar 2025 12:21:31 GMTCVECVE-2025-24743: WordPress RomethemeKit For Elementor plugin <= 1.5.2 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2025-24743/https://agentprime.io/advisories/CVE-2025-24743/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jan 2025 14:22:19 GMTCVECVE-2024-10324: RomethemeKit For Elementor <= 1.5.2 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templateshttps://agentprime.io/advisories/CVE-2024-10324/https://agentprime.io/advisories/CVE-2024-10324/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jan 2025 13:40:58 GMTCVECVE-2024-47626: WordPress RomethemeKit For Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerabilityhttps://agentprime.io/advisories/CVE-2024-47626/https://agentprime.io/advisories/CVE-2024-47626/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Oct 2024 13:31:23 GMTCVECVE-2024-32956: WordPress RomethemeKit For Elementor plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerabilityhttps://agentprime.io/advisories/CVE-2024-32956/https://agentprime.io/advisories/CVE-2024-32956/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Apr 2024 08:23:04 GMTCVE