WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
rometheme-for-elementor
Published
2026-03-10
Title
RTMKit < 2.0.0 - Reflected Cross-Site Scripting via 'themebuilder' Parameter
Slug
rometheme-for-elementor
Published
2026-05-12
Title
RTMKit Addons for Elementor < 2.0.3 - Authenticated (Author+) Local File Inclusion via 'path'
Slug
rometheme-for-elementor
Published
2026-05-12
Title
RTMKit Addons for Elementor < 2.0.3 - Authenticated (Author+) Missing Authorization to Widget Configuration Modification
Slug
rometheme-for-elementor
Published
2026-06-15
Title
RTMKit < 2.0.8 - Authenticated (Contributor+) Missing Authorization to Arbitrary Form Submission Access via 'entries_id' Parameter
Slug
rometheme-for-elementor
Published
2026-06-25
Title
RTMKit Addons for Elementor < 2.0.9 - Author+ Site-Wide Theme Builder Template Creation and Activation
Slug
rometheme-for-elementor
Published
2026-06-25
Title
RTMKit Addons for Elementor < 2.0.9 - Contributor+ Private Post Title Disclosure
Slug
rometheme-for-elementor
Published
2026-07-02
Title
RTMKit < 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Heading Widget 'Background Text' Parameter
Slug
rometheme-for-elementor
Published
2026-07-02
Title
RTMKit < 2.0.8 - Authenticated (Contributor+) Limited Local File Inclusion via 'template' Parameter
Slug
rometheme-for-elementor
Published
2026-09-02
Title
RTMKit < 2.1.6 - Authenticated (Contributor+) PHP Object Injection
Slug
rometheme-for-elementor
Published
2026-09-02
Title
RTMKit < 2.1.6 - Unauthenticated Stored Cross-Site Scripting
Slug
rometheme-for-elementor
Published
2026-09-10
Title
RTMKit < 2.1.6 - Cross-Site Request Forgery
Slug
romethemeform
Published
2024-04-22
Title
RomethemeForm For Elementor < 1.1.3 - Missing Authorization
Slug
romethemeform
Published
2024-05-22
Title
RomethemeForm For Elementor < 1.1.6 - Missing Authorization via export_entries, rtformnewform, and rtformupdate
Slug
romethemeform
Published
2026-08-17
Title
RTMForm Builder < 1.2.7 - Missing Authorization
Slug
ronneby-core
Published
2025-10-27
Title
Ronneby Theme Core <= 1.5.68 - Authenticated (Contributor+) Local File Inclusion
Slug
ronneby-core
Published
2025-10-27
Title
Ronneby Theme Core <= 1.5.68 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
roomcloud
Published
2015-05-09
Title
Roomcloud v1.1(rev @1115307) - Cross-Site Scripting (XSS)
Slug
root-cookie
Published
2025-01-16
Title
root Cookie <= 1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
rootblox
Published
2026-10-20
Title
Rootblox – Header & Footer Builder for Full Site Editing (FSE) < 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
rootblox
Published
2026-10-20
Title
Rootblox – Header & Footer Builder for Full Site Editing (FSE) < 1.0.7 - Unauthenticated Local File Inclusion
Slug
rootspersona
Published
2025-05-19
Title
Rootspersona <= 3.7.5 - Missing Authorization
Slug
rootspersona
Published
2025-05-19
Title
Rootspersona <= 3.7.5 - Cross-Site Request Forgery
Slug
rotating-posts
Published
2022-05-31
Title
Rotating Posts <= 1.11 - Arbitrary Settings Update to Stored XSS via CSRF
Slug
rotatingtweets
Published
2024-06-05
Title
Rotating Tweets (Twitter widget and shortcode) <= 1.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
rough-chart
Published
2022-07-18
Title
Rough Chart <= 1.0.0 - Admin+ Stored Cross-Site Scripting