RTMKit

Güvenlik açıkları

• CVE-2025-62065giriş gerekir≤ 1.6.5

  WordPress RTMKit plugin <= 1.6.5 - Arbitrary File Upload vulnerability

  Kritik 9.9

• CVE-2025-30911giriş gerekir≤ 1.5.4

  WordPress RomethemeKit For Elementor plugin <= 1.5.4 - Arbitrary Plugin Installation/Activation to RCE vulnerability

  Kritik 9.9

• CVE-2026-84752katılımcı+≤ 2.1.5

  WordPress RTMKit plugin <= 2.1.5 - PHP Object Injection vulnerability

  Yüksek 8.8

• CVE-2026-3425yazar+≤ 2.0.2

  RTMKit Addons for Elementor <= 2.0.2 - Authenticated (Author+) Local File Inclusion via 'path'

  Yüksek 8.8

• CVE-2026-84763kimlik doğrulamasız · tıklama gerekir≤ 2.1.5

  WordPress RTMKit plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2024-33919kimlik doğrulamasız≤ 1.4.1

  WordPress RomethemeKit For Elementor plugin <= 1.4.1 - Broken Access Control vulnerability

  Orta 6.5

• CVE-2025-64283giriş gerekir≤ 1.6.7

  WordPress RTMKit plugin <= 1.6.7 - Insecure Direct Object References (IDOR) vulnerability

  Orta 6.5

• CVE-2025-49235giriş gerekir≤ 1.6.0

  WordPress RTMKit Addons for Elementor plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2024-47626giriş gerekir≤ 1.5.0

  WordPress RomethemeKit For Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2024-32956giriş gerekir≤ 1.4.1

  WordPress RomethemeKit For Elementor plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2026-5149katılımcı+≤ 2.0.7

  RTMKit <= 2.0.7 - Authenticated (Contributor+) Missing Authorization to Arbitrary Form Submission Access via 'entries_id' Parameter

  Orta 6.5

• CVE-2026-8351katılımcı+≤ 2.0.7

  RTMKit <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Heading Widget 'Background Text' Parameter

  Orta 6.4

• CVE-2025-8609katılımcı+≤ 1.6.5

  RTMKit Addons <= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Repeater Block Attribute

  Orta 6.4

• CVE-2025-12473kimlik doğrulamasız · tıklama gerekir≤ 1.6.8

  RTMKit <= 1.6.8 - Reflected Cross-Site Scripting via 'themebuilder' Parameter

  Orta 6.1

• CVE-2026-62133abone+≤ 2.1.5

  WordPress RTMKit plugin <= 2.1.5 - Cross Site Request Forgery (CSRF) vulnerability

  Orta 5.4

• CVE-2024-10326abone+≤ 1.5.3

  RomethemeKit For Elementor <= 1.5.3 - Missing Authorization in save_options and reset_widgets

  Orta 4.3

• CVE-2025-24743giriş gerekir≤ 1.5.2

  WordPress RomethemeKit For Elementor plugin <= 1.5.2 - Broken Access Control vulnerability

  Orta 4.3

• CVE-2026-5137katılımcı+≤ 2.0.7

  RTMKit <= 2.0.7 - Authenticated (Contributor+) Limited Local File Inclusion via 'template' Parameter

  Orta 4.3

• CVE-2026-3426yazar+≤ 2.0.2

  RTMKit Addons for Elementor <= 2.0.2 - Authenticated (Author+) Missing Authorization to Widget Configuration Modification

  Orta 4.3

• CVE-2024-10324katılımcı+≤ 1.5.2

  RomethemeKit For Elementor <= 1.5.2 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates

  Orta 4.3