Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: RTMKit 2.0.9 Clear all filters
TI-2026-10998 CVE-2026-12907 · GHSA-q754-gwx4-mxg2

RTMKit Addons for Elementor < 2.0.9 - Author+ Site-Wide Theme Builder Template Creation and Activation

Priority MEDIUM 47

The RTMKit WordPress plugin before 2.0.9 does not perform a proper capability check on one of its -builder AJAX actions, allowing users with at least the Author role to create and activate a site-wide template that overr…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00281 Published 2026-07-16 Fixed in 2.0.9 CWE-862
TI-2026-10997 CVE-2026-12906 · GHSA-344h-fqfm-3mrj

RTMKit Addons for Elementor < 2.0.9 - Contributor+ Private Post Title Disclosure

Priority MEDIUM 47

The RTMKit WordPress plugin before 2.0.9 does not perform a capability check in one of its AJAX actions and resolves a request-supplied post identifier directly, allowing users with at least the Contributor role to read…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00299 Published 2026-07-16 Fixed in 2.0.9 CWE-639