Medium severity5.3NVD Advisory· Published May 23, 2024· Updated Jun 17, 2026

CVE-2023-6325

Description

The RomethemeForm For Elementor plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the export_entries, rtformnewform, and rtformupdate functions in all versions up to, and including, 1.1.5. This makes it possible for unauthenticated attackers to export arbitrary form submissions, create new forms, or update any post title or certain metadata.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Romethemeforminferred
Range: <=1.1.5
Package: https://wordpress.org/plugins/romethemeform
WordPress/Rometheme For Elementorllm-fuzzy
Range: <=1.1.5
Package: https://wordpress.org/plugins/rometheme-for-elementor

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/browser/romethemeform/tags/1.1.2/modules/form/form.phpnvd
plugins.trac.wordpress.org/changeset/3090708/romethemeform/trunknvd
www.wordfence.com/threat-intel/vulnerabilities/id/81a293ea-abda-4c90-a109-791ca5ba89a4nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000