The vulnerability CVE-2025-62065 affects the Rometheme RTMKit plugin for Elementor, specifically versions up to and including 1.6.5. It permits an attacker with low privileges to upload files of dangerous types without restriction, which can result in a complete compromise of the affected system. The CVSS v3.1 base score is 9.9, indicating critical severity with network attack vector, low attack complexity, no user interaction required, and full impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to full system compromise, including unauthorized disclosure, modification, or destruction of data, and disruption of service. Given the critical CVSS score and the nature of the vulnerability, attackers can execute arbitrary code or deploy malware by uploading malicious files.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or fix information is provided in the available data. Until a patch is released, restrict file upload permissions and monitor for suspicious upload activity where possible.