Read the docs

rometheme

Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

rometheme records in CISA KEV

No rometheme vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Romethemekit For Elementor 2 records LOW

Records

2 records in Romethemekit For Elementor · all components

TI-2024-09567 CVE-2024-10326 · GHSA-mr93-x2jp-pq8f

RomethemeKit For Elementor <= 1.5.3 - Missing Authorization in save_options and reset_widgets

Priority LOW 20

The RomethemeKit For Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_options and reset_widgets functions in all versions up to, and includin…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0036 Published 2025-03-08 No fix listed CWE-862
TI-2024-09565 CVE-2024-10324 · GHSA-24xv-7qh2-7x7v

RomethemeKit For Elementor <= 1.5.2 - Authenticated (Contributor+) Sensitive Information…

Priority LOW 20

The RomethemeKit For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.5.2 via the register_controls function in widgets/offcanvas-rometheme.php.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00276 Published 2025-01-24 No fix listed CWE-1230
Open these records in search →