CVE-2026-84763

Unauthenticated Cross Site Scripting (XSS) in RTMKit <= 2.1.5 versions.

Credits

momopon1415 | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/rometheme-for-elementor/vulnerability/wordpress-rtmkit-plugin-2-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve