merkulove vulnerabilities and threats

43 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	10.0	EPSS 0.4%	CVE-2025-49444Reformer for Elementor (WordPress plugin) · Unrestricted File Upload Critical10.0EPSS 0.4%2025-06-17CVE Database V5CVE-2025-49444 Unrestricted Upload of File with Dangerous Type vulnerability in merkulove Reformer for Elementor reformer-elementor allows Upload a Web Shell to a Web Server.This issue affects Reformer for Elementor: from n/a through <= 1.0.5. EPSS 0.4%Vulnerability merkulove	CVE Database V5	2025-06-17
Medium	6.5	EPSS 0.3%	CVE-2024-50445Selection Lite (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2024-10-28CVE Database V5CVE-2024-50445 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in merkulove Selection Lite selection-lite allows Stored XSS.This issue affects Selection Lite: from n/a through <= 1.13. EPSS 0.3%Vulnerability merkulove	CVE Database V5	2024-10-28
Medium	6.5	EPSS 0.3%	CVE-2024-43147Selection Lite (WordPress plugin) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.3%2024-08-12CVE Database V5CVE-2024-43147 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Merkulove Selection Lite allows Stored XSS.This issue affects Selection Lite: from n/a through 1.11. EPSS 0.3%Vulnerability Merkulove CWE-79	CVE Database V5	2024-08-12

Page 3 of 3