Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: rometheme Component: Romethemekit For Elementor Clear all filters
TI-2024-09567 CVE-2024-10326 · GHSA-mr93-x2jp-pq8f

RomethemeKit For Elementor <= 1.5.3 - Missing Authorization in save_options and reset_widgets

Priority LOW 20

The RomethemeKit For Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_options and reset_widgets functions in all versions up to, and includin…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0036 Published 2025-03-08 No fix listed CWE-862
TI-2024-09565 CVE-2024-10324 · GHSA-24xv-7qh2-7x7v

RomethemeKit For Elementor <= 1.5.2 - Authenticated (Contributor+) Sensitive Information…

Priority LOW 20

The RomethemeKit For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.5.2 via the register_controls function in widgets/offcanvas-rometheme.php.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00276 Published 2025-01-24 No fix listed CWE-1230