Rometheme vulnerabilities
We track 3 vulnerabilities in Rometheme products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 13, 2026.
Latest Rometheme vulnerabilities
- 8.8 High severity
RTMKit: Improper Control of Filename for Include/Require Statement in PHP Program
The RTMKit Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.2 via the 'path' parameter of the 'get_content' AJAX action. This makes it possible for authenticated attackers, with Author-le
- 9.9 Critical severity
RTMKit: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in Rometheme RTMKit rometheme-for-elementor.This issue affects RTMKit: from n/a through <= 1.6.5.
- 9.9 Critical severity
RTMKit: Improper Control of Generation of Code
Improper Control of Generation of Code ('Code Injection') vulnerability in Rometheme RTMKit rometheme-for-elementor allows Command Injection.This issue affects RTMKit: from n/a through <= 1.5.4.