RTMKit for Elementor – Modular Addons, Widgets, Templates, Icon Library, GSAP Animations, MCP & Store Ready

RTMKit for Elementor – Modular Addons, Widgets, Templates, Icon Library, GSAP Animations, MCP & Store Ready has 22 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 22 are fixed as of October 2026. Their average CVSS score is 5.9, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 5 high. 2026 was the busiest year with 11 disclosures.

The most common weakness is Cross-Site Scripting, behind 7 of the records (32%). Other recurring categories include Missing Authorization, Authorization Bypass Through User-Controlled Key.

Every one of the 22 issues recorded for RTMKit for Elementor – Modular Addons, Widgets, Templates, Icon Library, GSAP Animations, MCP & Store Ready has a vendor fix available, so running the current release closes all known holes.

19 independent researchers contributed these findings, most of them (2) reported by Meher Sudhakar Abbireddi. RTMKit for Elementor – Modular Addons, Widgets, Templates, Icon Library, GSAP Animations, MCP & Store Ready is installed on roughly 40,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.7.

01234567891006.01.2023Today22.04.20246.4RomethemeKit For Elementor <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 22.04.202429.04.20245.3RomethemeKit For Elementor <= 1.4.1 - Missing Authorization CVSS 5.3 · 29.04.202430.09.20246.4RomethemeKit For Elementor <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 30.09.202414.01.20254.3RomethemeKit For Elementor <= 1.5.3 - Missing Authorization in save_options and reset_widgets CVSS 4.3 · 14.01.202523.01.20254.3RomethemeKit For Elementor <= 1.5.2 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates CVSS 4.3 · 23.01.202524.01.20254.3RomethemeKit For Elementor <= 1.5.2 - Missing Authorization CVSS 4.3 · 24.01.202514.02.20254.3RTMKit <= 1.6.7 - Authenticated (Contributor+) Insecure Direct Object Reference CVSS 4.3 · 14.02.202527.03.20258.8RomethemeKit For Elementor <= 1.5.4 - Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation CVSS 8.8 · 27.03.202505.06.20256.4RTMKit Addons for Elementor <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 05.06.202518.10.20258.8RTMKit <= 1.6.5 - Authenticated (Contributor+) Arbitrary File Upload CVSS 8.8 · 18.10.202517.11.20256.4RTMKit Addons <= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Repeater Block Attribute CVSS 6.4 · 17.11.202510.03.20266.1RTMKit <= 1.6.8 - Reflected Cross-Site Scripting via 'themebuilder' Parameter CVSS 6.1 · 10.03.202612.05.20264.3RTMKit Addons for Elementor <= 2.0.2 - Authenticated (Author+) Missing Authorization to Widget Configuration Modification CVSS 4.3 · 12.05.20268.8RTMKit Addons for Elementor <= 2.0.2 - Authenticated (Author+) Local File Inclusion via 'path' CVSS 8.8 · 12.05.202615.06.20266.5RTMKit <= 2.0.7 - Authenticated (Contributor+) Missing Authorization to Arbitrary Form Submission Access via 'entries_id' Parameter CVSS 6.5 · 15.06.202625.06.20264.3RTMKit Addons for Elementor <= 2.0.8 - Authenticated (Contributor+) Information Exposure CVSS 4.3 · 25.06.20264.3RTMKit Addons for Elementor <= 2.0.8 - Missing Authorization CVSS 4.3 · 25.06.202602.07.20266.4RTMKit <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Heading Widget 'Background Text' Parameter CVSS 6.4 · 02.07.20264.3RTMKit <= 2.0.7 - Authenticated (Contributor+) Limited Local File Inclusion via 'template' Parameter CVSS 4.3 · 02.07.202602.09.20267.2RTMKit <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 02.09.20267.5RTMKit <= 2.1.5 - Authenticated (Contributor+) PHP Object Injection CVSS 7.5 · 02.09.202610.09.20264.3RTMKit <= 2.1.5 - Cross-Site Request Forgery CVSS 4.3 · 10.09.2026

Strategic Overview

Avg CVSSMedium
5.9/ 10
Patch Coverage100%
Open

0

Fixed

22

Get automatic notifications for all RTMKit for Elementor – Modular Addons, Widgets, Templates, Icon Library, GSAP Animations, MCP & Store Ready vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2026-3425

RTMKit Addons for Elementor <= 2.0.2 - Authenticated (Author+) Local File Inclusion via 'path'

Read the full analysis

Vulnerability Records

22 records
2026-09-10 00:00CVE-2026-62133
4.3
Medium
MYUNGYONG LEEYes
2026-09-02 00:00CVE-2026-84763
7.2
High
momopon1415Yes
2026-09-02 00:00CVE-2026-84752
7.5
High
darooYes
2026-07-02 21:01CVE-2026-5137
4.3
Medium
wesley (wcraft)Yes
2026-07-02 17:43CVE-2026-8351
6.4
Medium
theviper17yYes
2026-06-25 00:00CVE-2026-12906
4.3
Medium
Meher Sudhakar AbbireddiYes
2026-06-25 00:00CVE-2026-12907
4.3
Medium
Meher Sudhakar AbbireddiYes
2026-06-15 17:15CVE-2026-5149
6.5
Medium
wesley (wcraft)Yes
2026-05-12 00:00CVE-2026-3426
4.3
Medium
Yuto HyakumotoYes
2026-05-12 00:00CVE-2026-3425
8.8
High
Yuto HyakumotoYes
Showing 1–10 of 22 reports
RTMKit for Elementor – Modular Addons, Widgets, Templates, Icon Library, GSAP Animations, MCP & Store Ready banner
Latestv2.2.1

RTMKit for Elementor – Modular Addons, Widgets, Templates, Icon Library, GSAP Animations, MCP & Store Ready

Rometheme

Author

Rometheme

2.7(16)
54/100
Last Updated
2026-10-15 (13d ago)
Active Installs
40,000+
Downloads
548,736
Requires WP
6.8+
Requires PHP
8.3+
Tested up to
WP 7.0.7
Created
2023-01-06 (4y ago)
Requires Plugins
elementor

RTMKit for Elementor – Modular Addons, Widgets, Templates, Icon Library, GSAP Animations, MCP & Store Ready Build Professional WordPress Websites Faster Create beautiful, interactive WordPress websites with Elementor using 115 widgets and elements, 2,400+ ready-to-use icons, advanced design tools, and flexible customization options—all without writing code. From landing pages and business websites to blogs, portfolios, and online stores, RTMKit gives you the tools to create engaging layouts, dynamic content, and memorable website experiences with less effort. Explore a growing collection of creative widgets, ready-made template kits, form-building capabilities, and interactive design tools. Start with the free plugin and unlock more advanced capabilities with RTMKit PRO as your projects grow. Useful Links Docs | Video Tutorials | Join Community | What’s New? | Upgrade To Pro | Share Review 🚀 Why Choose RTMKit? 115 Widgets & Elements – Build professional layouts with a broad collection of content, media, navigation, WooCommerce, form, and interactive elements. 2,400+ Ready-to-Use Icons – Enhance your designs with an extensive icon library. GSAP-Powered Animation – Explore powerful motion and animation capabilities through RTM Motion. 50+ Ready-Made Template Kits – Speed up website creation with professionally designed layouts. Flexible Design Controls – Customize typography, colors, spacing, layouts, and visual effects. Form Building for Elementor – Create contact, feedback, and newsletter forms with RTMForm Builder. WooCommerce Integration – Design product displays and enhance online store experiences. Advanced Blog Layouts – Create attractive post grids, lists, carousels, and custom content layouts. Interactive Design Effects – Add image hotspots, hover interactions, animations, glass effects, and more. Modular Product Ecosystem – Explore specialized tools for elements, templates, WooCommerce, blogs, motion, navigation, and popups. MCP & AI-Ready – Designed to support emerging AI-powered workflows and MCP integrations, helping developers explore new ways to connect tools and streamline website-building tasks. A More Efficient Workflow – Reduce repetitive work and create websites with greater flexibility. ✨ What’s New in the RTMKit Ecosystem? RTMKit is getting bigger. And better. We’re evolving beyond a collection of widgets into a growing, modular ecosystem designed to give Elementor users more creative freedom and specialized tools for building modern websites. Following the introduction of RTM Elements, RTM Woo, RTM Blog, and RTM Templates, we’re expanding the ecosystem with three additions. RTM Motion — Bring Your Designs to Life Create more engaging website experiences with motion and animation capabilities powered by GSAP. Explore new possibilities for interactive designs, visual effects, and dynamic website experiences. RTM Mega Menu — Rethink Website Navigation Build advanced navigation experiences with a drag-and-drop builder, custom badges, conditional visibility, dynamic content, hover effects, animations, and responsive controls. RTM Popup — Make Every Interaction Count Create popup experiences for announcements, promotions, and lead generation with flexible placement and animation options. These products extend the wider RTM ecosystem. Their availability and requirements depend on the individual product. 🌟 Explore 115 Widgets and Elements Discover a growing collection of tools for building professional websites with Elementor. Each item is organized by its primary function to help you find the right tool for your project. Availability guide: [Free] Included in the free version · [PRO] Requires RTMKit PRO. 1. Navigation, Headers & Menus Build intuitive navigation experiences that help visitors explore your website. Back to Top [Free] – Add a customizable button that lets visitors quickly return to the top of a page. Breadcrumb [PRO] – Display navigational trails to help visitors understand their location within your website. Header Info [Free] – Display contact details such as your address, phone number, and email in your header. Header Offcanvas [Free] – Create toggleable panels for additional navigation, forms, or supplementary content. Mega Menu [PRO] – Build advanced navigation layouts with custom content, badges, conditional visibility, and responsive controls. Nav Menu [Free] – Create dropdown navigation menus for clear and accessible website navigation. Search [Free] – Add classic or modal search interfaces to help visitors find content. Site Logo [Free] – Display your website logo with customizable styling. Sub Menu [PRO] – Create and customize submenu layouts for more structured navigation. 2. Headings, Text & Content Present information clearly with flexible typography and content widgets. Accordion [Free] – Organize FAQs and other content into expandable sections. Advanced Categories [PRO] – Display content categories in a customizable layout to help visitors explore related topics. Advanced Heading [Free] – Create distinctive headings with extended typography and styling controls. Animated Heading [Free] – Add animated text effects to emphasize important words and headlines. Advanced Posts [PRO] – Display and customize post listings with advanced layout and content presentation options. Advanced Tabs [Free] – Organize related information into horizontal or vertical tabs. Advanced Toggle [PRO] – Create interactive toggle elements with custom styling and animations. Blockquote [Free] – Highlight quotations, testimonials, or important statements. Call to Action [Free] – Combine headlines, descriptions, and buttons to encourage visitors to take action. Dual Button [Free] – Display two buttons together to present alternative actions, destinations, or offers. Dynamic Field [PRO] – Display dynamic field values from supported content sources using customizable styling. Text Marquee [Free] – Create continuously scrolling text for announcements, promotions, or visual effects. Textual Showcase [PRO] – Present key information through animated or scroll-revealed text blocks. 3. Buttons, Timelines & Visual Interactions Create engaging interactions and present information through distinctive visual elements. Advanced Button [PRO] – Design buttons with advanced styling, hover effects, and interactive behavior. Advanced Timeline [PRO] – Present milestones, processes, events, or project histories in a structured timeline. Animated Circle Button [PRO] – Create circular buttons with animated hover effects for distinctive calls to action. Background Switcher [PRO] – Let visitors switch between predefined background options through interactive controls. 4. Image Galleries & Interactive Showcases Showcase your work, products, and visual content with engaging layouts. Image Accordion [Free] – Present images in interactive horizontal or vertical accordion layouts. Image Box [Free] – Combine an image, icon, heading, and description in a single content element. Image Comparison [Free] – Let visitors compare two images using an interactive before-and-after slider. Image Gallery [Free] – Display images in responsive grid or masonry layouts. Image Hotspot [PRO] – Add interactive markers and tooltips to images, including support for dynamic post or product content. Image Marquee [PRO] – Create continuously scrolling image strips for logos, portfolios, and visual content. Image Stack Info [PRO] – Showcase grouped images alongside ratings and key details. Interactive Link [PRO] – Create engaging hover interactions that reveal images, text, buttons, and other content. Interactive Showcase [PRO] – Present images and visual content with interactive motion and hover effects. Filterable Gallery [PRO] – Organize portfolio images into categories visitors can filter to find relevant work. 5. Video, Audio & Animation Add media, motion graphics, and interactive effects to your website. Audio Player [PRO] – Embed audio content with a dedicated player interface for listening to music, recordings, or other audio. Lottie [PRO] – Display Lottie animations to bring lightweight motion graphics into your layouts. Media on Hover [PRO] – Create hover-triggered media experiences, such as video previews, for supported content. Video Button [Free] – Display a video play button that opens video content in a popup or lightbox. 6. Cards, Carousels & Hero Sliders Organize content into engaging layouts and create impactful visual presentations. Advanced Card [PRO] – Create flexible card layouts with customizable content, styling, and interactive effects. Advanced Hero Slider [PRO] – Build advanced hero presentations with richer visual effects and interactive transitions. Card Carousel [Free] – Display cards in a responsive, swipeable carousel. Client Carousel [PRO] – Showcase client logos in an interactive slider. Client Grid [Free] – Present client logos in a clean, organized grid. Hero Slider [Free] – Create full-width sliders with image or video backgrounds. Team Member [Free] – Showcase team members with photos, roles, and social links. Team Carousel [PRO] – Present team profiles in a carousel that visitors can navigate through. Testimonials Carousel [Free] – Display customer testimonials in a rotating layout. 7. Pricing & Conversion Present offers, compare plans, and guide visitors toward purchasing decisions. Pricing Image Box [PRO] – Combine pricing information with product imagery to create visually engaging offers. Pricing List [PRO] – Present service, product, or restaurant-style pricing menus. Pricing Table [Free] – Compare pricing plans, features, and calls to action in a structured layout. 8. Social Media & Sharing Connect your website with social platforms and encourage content sharing. Social Share [Free] – Add styled buttons that let visitors share website content across supported platforms. Social Icons [Free] – Display links to your social media profiles with customizable icons and styling. 9. Charts, Statistics & Progress Visualize data, highlight achievements, and communicate progress. Bar Chart [Free] – Display comparisons using horizontal or vertical bars. Countdown [Free] – Display countdown timers for launches, events, and promotions. Counter [Free] – Highlight statistics, milestones, and important numbers. Line Chart [Free] – Visualize trends and changes using line graphs. Pie Chart [Free] – Show proportions and data distribution in a circular chart. Progress Bar [Free] – Display completion percentages or progress toward a goal. 10. WooCommerce & Online Stores Build and customize online shopping experiences with dedicated WooCommerce elements. Add to Cart [PRO] – Display an add-to-cart control so customers can add products to their shopping cart. Cart Page Builder [PRO] – Customize the layout and presentation of the WooCommerce cart page. Checkout Page Builder [PRO] – Customize the checkout layout to create a more consistent purchasing experience. My Account Page Builder [PRO] – Design the WooCommerce account area where customers manage their accounts and orders. Product Collections [PRO] – Showcase curated groups of products in a customizable layout. Product Data Tabs [PRO] – Display product information in organized tabs, such as descriptions and additional details. Product Description [PRO] – Display and style the product description on product pages. Product Filter [PRO] – Help shoppers narrow product listings using supported filtering options. Product Image [PRO] – Display product images with customizable presentation and layout controls. Product Meta [PRO] – Display product metadata such as SKU, categories, and tags where available. Product Price [PRO] – Display product prices with customizable styling. Product Title [PRO] – Display and style product titles. Product Variations [PRO] – Present product variation options for supported variable products. Thank You Page Builder [PRO] – Customize the order confirmation page shown after checkout. Woo Product Carousel [PRO] – Showcase WooCommerce products in a navigable carousel. Woo Product Grid [Free] – Display WooCommerce products in a customizable grid. 11. Blog Posts & Dynamic Content Create engaging content layouts for blogs and content-driven websites. Archive Posts [PRO] – Customize post listings on archive pages, including category and other supported archives. Archive Title [PRO] – Display dynamic titles for archive pages. Featured Image [PRO] – Display and style the featured image of a post. Post Author [PRO] – Display author names, avatars, and biography information. Post Comment [PRO] – Add comment sections to single-post layouts. Post Content [PRO] – Display and customize the main content of a post. Post Excerpt [PRO] – Display short previews of posts. Post Info [PRO] – Display post metadata such as dates, categories, tags, and other supported information. Post Navigation [PRO] – Add previous and next post links to help readers navigate between articles. Post Title [PRO] – Display and style dynamic post titles. Post Block [Free] – Highlight blog posts in block-style layouts. Post Carousel [PRO] – Feature blog content in a navigable carousel. Post Grid [Free] – Display blog posts in a responsive grid. Post List [Free] – Present posts in a vertical list for a compact content layout. 12. Extensions & Website Productivity Simplify repetitive tasks and enhance your website’s visual presentation. Custom Cursor Effect [PRO] – Create distinctive cursor styles for interactive website designs. Duplicator [Free] – Duplicate posts and pages to speed up repetitive website-building tasks. Glass Effect [Free] – Add frosted-glass or blur-style backgrounds to supported elements. Sticky Content [PRO] – Keep supported elements visible while scrolling to improve content accessibility. Tooltips [Free] – Display supplementary information when visitors hover over supported elements. Wrapper Link [Free] – Make supported sections, columns, or containers clickable. 13. GSAP Motion Elements Explore specialized motion capabilities through the RTM Motion ecosystem. Text Motion [PRO] – Animate text to create more engaging headings, messages, and content presentations. Layout Motion [PRO] – Animate layout elements to create smoother transitions and more dynamic visual compositions. Element Motion [PRO] – Add motion effects to supported elements to draw attention to important content. Image Motion [PRO] – Animate images to create more engaging visual experiences. These motion elements depend on the relevant RTM Motion functionality. Confirm whether they are included in the current RTMKit PRO release or require a separate addon. 14. RTMForm Builder Create contact forms, feedback forms, newsletter forms, and other custom forms with configurable fields and styling. Available form elements: Checkbox [Free] – Let visitors select one or more options from a list. ReCAPTCHA+ [Free] – Add supported CAPTCHA verification to help protect forms against automated submissions. Date [Free] – Let visitors select a date using a date input. Email Field [Free] – Collect email addresses using an email input. GDPR Consent [Free] – Request consent for privacy policies or other required terms. Number [Free] – Collect numeric values with a number input. Radio Button [Free] – Let visitors choose one option from a group. Select [Free] – Provide a dropdown list of available options. Submit Button [Free] – Let visitors submit completed forms with a customizable button. Telephone [Free] – Collect telephone numbers using a phone input. Text [Free] – Collect short text responses. Text Area [Free] – Collect longer messages or written feedback. Time [Free] – Let visitors select a time. Login [PRO] – Provide a form element for user login workflows. Register [PRO] – Provide a form element for user registration workflows. RTMForm Builder offers flexible field styling and layout controls to help you create forms that match your website’s design. Requirement: RTMForm Builder must be installed for the form-building functionality described above. Check the current feature and licensing requirements before use. Get RTMForm Builder: https://wordpress.org/plugins/romethemeform/ 🚀 Unlock More with RTMKit PRO Need more creative freedom? RTMKit PRO unlocks additional widgets and advanced capabilities for …

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C