Software intelligence
Important: Rometheme For Elementor appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works
Tracked advisories
19
Latest advisory
2 July 2026
CISA KEV matches
0
In this WordPress feed
WordPress slug
rometheme-for-elementor
Plugin
This catalog lists 19 known advisories affecting Rometheme For Elementor. The most recent was published on 2 July 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.
RTMKit <= 2.0.7 - Authenticated (Contributor+) Limited Local File Inclusion via 'template' Parameter
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 2 July 2026
RTMKit <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Heading Widget 'Background Text' Parameter
May allow attackers to run scripts in visitors' browsers or hijack admin sessions.
Published 2 July 2026
RTMKit Addons for Elementor <= 2.0.8 - Authenticated (Contributor+) Information Exposure
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 25 June 2026
Known Rometheme For Elementor advisories published by month.
CVE-2026-5137 · Published 2 July 2026
Affected versions: ≤ 2.0.7
CVE-2026-8351 · Published 2 July 2026
Affected versions: ≤ 2.0.7
CVE-2026-12906 · Published 25 June 2026
Affected versions: ≤ 2.0.8
CVE-2026-12907 · Published 25 June 2026
Affected versions: ≤ 2.0.8
CVE-2026-5149 · Published 15 June 2026
Affected versions: ≤ 2.0.7
CVE-2026-3426 · Published 12 May 2026
Affected versions: ≤ 2.0.2
CVE-2026-3425 · Published 12 May 2026
Affected versions: ≤ 2.0.2
CVE-2025-12473 · Published 10 March 2026
Affected versions: ≤ 1.6.8
CVE-2025-8609 · Published 17 November 2025
Affected versions: ≤ 1.6.5
CVE-2025-62065 · Published 18 October 2025
Affected versions: ≤ 1.6.5
CVE-2025-49235 · Published 5 June 2025
Affected versions: ≤ 1.6.0
CVE-2025-30911 · Published 27 March 2025
Affected versions: ≤ 1.5.4
CVE-2025-64283 · Published 14 February 2025
Affected versions: ≤ 1.6.7
CVE-2025-24743 · Published 24 January 2025
Affected versions: ≤ 1.5.2
CVE-2024-10324 · Published 23 January 2025
Affected versions: ≤ 1.5.2
SiteRespond Defence matches your installed Rometheme For Elementor version against this catalog when the Defence plugin is connected to your WordPress site.