RLM Elementor Widgets Pack
RLM Elementor Widgets Pack has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for RLM Elementor Widgets Pack has a vendor fix available, so running the current release closes it.
All of these findings were reported by Gab. RLM Elementor Widgets Pack is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2024-50542RLM Elementor Widgets Pack <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
RLM Elementor Widgets Pack
Author
zachsilberstein
RLM Elementor Widgets Pack adds a focused set of custom Elementor widgets used on restaurant and small-business WordPress sites. Included widgets: Copyright w/ Year: outputs a business name, current year, and optional developer link. Food Menu: renders full menu sections and menu content in one widget. Food Menu Sections: creates anchor links for jumping between menu sections. Daily Specials: manages a repeatable list of specials with expandable details. Hours / Open Now: shows current open status and a configurable weekly schedule. Multi Location: switches between tabbed or card-based location profiles with CTAs. Order Online Hub: creates a tabbed ordering section for pickup, delivery, catering, and call-in links. Page Header & Title: displays a page title over a configurable background image. RLM Smart Button: renders a fixed or inline call-to-action button. Marquee Banner: outputs continuously scrolling announcement text.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C