Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Rometheme RTMKit rometheme-for-elementor allows Command Injection.This issue affects RTMKit: from n/a through <= 1.5.4.

INFO

Published Date :

2025-04-01T05:31:40.844Z

Last Modified :

2026-04-01T15:47:59.130Z

Source :

Patchstack
AFFECTED PRODUCTS

The following products are affected by CVE-2025-30911 vulnerability.

Vendors Products
Rometheme
  • Romethemekit For Elementor
Wordpress
  • Wordpress
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-30911.

URL Resource
https://patchstack.com/database/Wordpress/Plugin/rometheme-for-elementor/vulnerability/wordpress-romethemekit-for-elementor-plugin-1-5-4-arbitrary-plugin-installation-activation-to-rce-vulnerability?_s_id=cve cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System