plugin

Romethemeform Vulnerabilities

4 known security issues reported for the Romethemeform WordPress plugin. Most recent disclosed Jun 9, 2024.

2 medium

Running Romethemeform on your site? Check whether your installed version is affected.

Scan your site free

RTMForm Builder for Elementor [romethemeform] < 1.1.3

unknown

[en] Missing Authorization vulnerability in Rometheme RomethemeForm For Elementor.This issue affects RomethemeForm For Elementor: from n/a through 1.1.2.

Affected:
up to 1.1.3
Fixed in:
1.1.3
Disclosed:
Jun 9, 2024

CVE-2024-32727 on NVD →

RTMForm Builder for Elementor [romethemeform] < 1.1.6

unknown

[en] The RomethemeForm For Elementor plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the export_entries, rtformnewform, and rtformupdate functions in all versions up to, and including, 1.1.5. This makes it possible for unauthenticated attackers to...

Affected:
up to 1.1.6
Fixed in:
1.1.6
Disclosed:
May 23, 2024

CVE-2023-6325 on NVD →

RomethemeForm For Elementor <= 1.1.5 - Missing Authorization via export_entries, rtformnewform, and rtformupdate

medium

The RomethemeForm For Elementor plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the export_entries, rtformnewform, and rtformupdate functions in all versions up to, and including, 1.1.5. This makes it possible for unauthenticated attackers to expor...

CVSS:
5.3
Affected:
up to 1.1.5
Fixed in:
1.1.6
Disclosed:
May 22, 2024

CVE-2023-6325 on NVD →

RomethemeForm For Elementor <= 1.1.2 - Missing Authorization

medium

The RomethemeForm For Elementor plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to modify forms.

CVSS:
5.3
Affected:
up to 1.1.2
Fixed in:
1.1.3
Disclosed:
Apr 22, 2024

CVE-2024-32727 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database