Chazz Wolcott

**Name of the Vulnerable Software and Affected Versions** Rometheme RTMKit versions through 1.6.7 **Description** An authorization bypass exists in Rometheme RTMKit rometheme-for-elementor due to incorrectly configured access control security levels. This allows exploitation through a user-controlled key. **Recommendations** Update Rometheme RTMKit to a version later than 1.6.7.

**Name of the Vulnerable Software and Affected Versions** CyberChimps Responsive Plus versions 3.2.2 and earlier **Description** The issue is a Cross-Site Request Forgery (CSRF) vulnerability, which allows an attacker to perform unauthorized actions on a user's account. **Recommendations** For versions 3.2.2 and earlier, update to a version that includes a fix for this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Administrator Z versions through 2025.03.04 **Description** The issue is a Cross-Site Request Forgery (CSRF) vulnerability, which allows an attacker to perform unauthorized actions on the affected system. This is a type of attack where an attacker tricks a user into performing an unintended action on a web application that the user is authenticated to. **Recommendations** For versions through 2025.03.04, as a temporary workaround, consider implementing additional validation checks for requests to prevent unauthorized actions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.