CVE-2024-32727

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Missing Authorization vulnerability in Rometheme RomethemeForm For Elementor.This issue affects RomethemeForm For Elementor: from n/a through 1.1.2.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-862

Affected software

VendorProductVersions
RomethemeRomethemeForm For Elementor<= 1.1.2
romethemeromethemeform_for_elementor<= 1.1.2

References

Timeline

Published
Jun 9, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-327284.3Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Paid Member Subscriptions.This issue affects Paid Member Subscriptions: from nCVE-2024-327297.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in QuantumCloud Conversational Forms for ChatBoCVE-2024-32739.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-3CVE-2024-327306.5SAP Enable Now Manager does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On CVE-2024-327315.5SAP My Travel Requests does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On CVE-2024-327325.3Under certain conditions SAP BusinessObjects Business Intelligence platform allows an attacker to access information which would otherwise bCVE-2024-327336.1Due to missing input validation and output encoding of untrusted data, SAP NetWeaver Application Server ABAP and ABAP Platform allows an unaCVE-2024-327359.8An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticatCVE-2024-327367.5A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitCVE-2024-327377.5A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitCVE-2024-327387.5A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitCVE-2024-327397.5A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensit
CVE-2024-32727: Medium severity, CVSS 5.3 | Vulnix