https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T01:27:32.005101+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-288351 EUVD-2026-288351 2026-10-07T01:27:32.050936+00:00 EUVD-2026-288351 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10324 fkie_cve-2024-10324 2026-10-07T01:27:32.050974+00:00

The RomethemeKit For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.5.2 via the register_controls function in widgets/offcanvas-rometheme.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.

 https://cve.radiocsirt.org/vuln/ghsa-24xv-7qh2-7x7v GHSA-24xv-7qh2-7x7v 2026-10-07T01:27:32.051010+00:00

The RomethemeKit For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.5.2 via the register_controls function in widgets/offcanvas-rometheme.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.