CVE-2026-5149
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk15th percentile — higher than 15% of all known CVEs
Summary
The RTMKit plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to and including 2.0.7. This is due to the get_submission_content AJAX endpoint lacking a capability check to verify that a user has permission to access the requested form submission data.
Risk Assessment
Authenticated attackers with Contributor-level access and above can view arbitrary form submissions from other users, leading to a breach of data privacy.
Recommendation
It is recommended to update the RTMKit plugin to the latest version to mitigate this vulnerability and implement additional permission checks for AJAX endpoints.
Original NVD description (English source)
The RTMKit plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 2.0.7 This is due to the get_submission_content AJAX endpoint lacking a capability check to verify that a user has permission to access the requested form submission data. This makes it possible for authenticated attackers, with Contributor-level access and above, to view arbitrary form submissions from other users by iterating the entries_id parameter.