CVE-2026-84752

Contributor PHP Object Injection in RTMKit <= 2.1.5 versions.

Credits

daroo | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/rometheme-for-elementor/vulnerability/wordpress-rtmkit-plugin-2-1-5-php-object-injection-vulnerability?_s_id=cve