Merkulove vulnerabilities and threats

43 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.3	EPSS 0.4%	CVE-2026-74015Readabler (WordPress plugin) · SQL Injection Critical9.3EPSS 0.4%2026-08-18CVE Database V5CVE-2026-74015 Unauthenticated SQL Injection in Readabler < 2.0.18 versions. EPSS 0.4%Vulnerability merkulove CWE-89	CVE Database V5	2026-08-18
Medium	6.5	EPSS 0.2%	CVE-2026-57783Speaker (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-07-13CVE Database V5CVE-2026-57783 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in merkulove Speaker speaker allows Stored XSS.This issue affects Speaker: from n/a through <= 4.1.13. EPSS 0.2%Vulnerability merkulove CWE-79	CVE Database V5	2026-07-13
High	7.5	EPSS 0.4%	CVE-2025-69134Merkulove OpenAI Chatbot for WordPress – Helper · Missing Authorization High7.5EPSS 0.4%2026-07-02CVE Database V5CVE-2025-69134 Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Helper <= 1.1.4 versions. EPSS 0.4%Vulnerability CWE-862	CVE Database V5	2026-07-02
Medium	5.4	EPSS 0.3%	CVE-2025-66143Crumber (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.3%2026-01-22CVE Database V5CVE-2025-66143 Missing Authorization vulnerability in merkulove Crumber crumber-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Crumber: from n/a through <= 1.0.10. EPSS 0.3%Vulnerability merkulove	CVE Database V5	2026-01-22
Medium	5.4	EPSS 0.3%	CVE-2025-66142Comparimager for Elementor (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.3%2026-01-22CVE Database V5CVE-2025-66142 Missing Authorization vulnerability in merkulove Comparimager for Elementor comparimager-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Comparimager for Elementor: from n/a through <= 1.0.1. EPSS 0.3%Vulnerability merkulove	CVE Database V5	2026-01-22
Medium	5.4	EPSS 0.3%	CVE-2025-66141Scroller (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.3%2026-01-22CVE Database V5CVE-2025-66141 Missing Authorization vulnerability in merkulove Scroller scroller allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Scroller: from n/a through <= 2.0.2. EPSS 0.3%Vulnerability merkulove	CVE Database V5	2026-01-22
Medium	5.4	EPSS 0.3%	CVE-2025-66140Uper for Elementor (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.3%2026-01-22CVE Database V5CVE-2025-66140 Missing Authorization vulnerability in merkulove Uper for Elementor uper-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uper for Elementor: from n/a through <= 1.0.5. EPSS 0.3%Vulnerability merkulove	CVE Database V5	2026-01-22
Medium	5.4	EPSS 0.3%	CVE-2025-66139Audier For Elementor (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.3%2026-01-22CVE Database V5CVE-2025-66139 Missing Authorization vulnerability in merkulove Audier For Elementor audier-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Audier For Elementor: from n/a through <= 1.0.9. EPSS 0.3%Vulnerability merkulove	CVE Database V5	2026-01-22
Medium	5.4	EPSS 0.3%	CVE-2025-66138Motionger for Elementor (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.3%2026-01-22CVE Database V5CVE-2025-66138 Missing Authorization vulnerability in merkulove Motionger for Elementor motionger-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motionger for Elementor: from n/a through <= 2.0.4. EPSS 0.3%Vulnerability merkulove	CVE Database V5	2026-01-22
Medium	5.4	EPSS 0.3%	CVE-2025-66137Searcher for Elementor (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.3%2026-01-22CVE Database V5CVE-2025-66137 Missing Authorization vulnerability in merkulove Searcher for Elementor searcher-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Searcher for Elementor: from n/a through <= 1.0.3. EPSS 0.3%Vulnerability merkulove	CVE Database V5	2026-01-22
Medium	5.4	EPSS 0.3%	CVE-2025-66136Carter for Elementor (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.3%2026-01-22CVE Database V5CVE-2025-66136 Missing Authorization vulnerability in merkulove Carter for Elementor carter-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Carter for Elementor: from n/a through <= 1.0.2. EPSS 0.3%Vulnerability merkulove	CVE Database V5	2026-01-22
Medium	5.4	EPSS 0.3%	CVE-2025-66135Imager for Elementor (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.3%2026-01-22CVE Database V5CVE-2025-66135 Missing Authorization vulnerability in merkulove Imager for Elementor imager-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Imager for Elementor: from n/a through <= 2.0.4. EPSS 0.3%Vulnerability merkulove	CVE Database V5	2026-01-22
Medium	5.4	EPSS 0.2%	CVE-2025-66144Worker for Elementor (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.2%2025-12-31CVE Database V5CVE-2025-66144 Missing Authorization vulnerability in merkulove Worker for Elementor worker-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Worker for Elementor: from n/a through <= 1.0.10. EPSS 0.2%Vulnerability merkulove	CVE Database V5	2025-12-31
Medium	5.4	EPSS 0.2%	CVE-2025-66145Worker for WPBakery (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.2%2025-12-31CVE Database V5CVE-2025-66145 Missing Authorization vulnerability in merkulove Worker for WPBakery worker-wpbakery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Worker for WPBakery: from n/a through <= 1.1.1. EPSS 0.2%Vulnerability merkulove	CVE Database V5	2025-12-31
Medium	5.4	EPSS 0.2%	CVE-2025-66146Logger for Elementor (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.2%2025-12-31CVE Database V5CVE-2025-66146 Missing Authorization vulnerability in merkulove Logger for Elementor logger-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Logger for Elementor: from n/a through <= 1.0.9. EPSS 0.2%Vulnerability merkulove	CVE Database V5	2025-12-31
Medium	5.4	EPSS 0.2%	CVE-2025-66148Conformer for Elementor (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.2%2025-12-31CVE Database V5CVE-2025-66148 Missing Authorization vulnerability in merkulove Conformer for Elementor conformer-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Conformer for Elementor: from n/a through <= 1.0.7. EPSS 0.2%Vulnerability merkulove	CVE Database V5	2025-12-31
Medium	5.4	EPSS 0.2%	CVE-2025-66149UnGrabber (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.2%2025-12-31CVE Database V5CVE-2025-66149 Missing Authorization vulnerability in merkulove UnGrabber ungrabber allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UnGrabber: from n/a through <= 3.1.3. EPSS 0.2%Vulnerability merkulove	CVE Database V5	2025-12-31
Medium	5.4	EPSS 0.2%	CVE-2025-66150Appender (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.2%2025-12-31CVE Database V5CVE-2025-66150 Missing Authorization vulnerability in merkulove Appender appender allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Appender: from n/a through <= 1.1.1. EPSS 0.2%Vulnerability merkulove	CVE Database V5	2025-12-31
Medium	5.4	EPSS 0.2%	CVE-2025-66151Countdowner for Elementor (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.2%2025-12-31CVE Database V5CVE-2025-66151 Missing Authorization vulnerability in merkulove Countdowner for Elementor countdowner-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Countdowner for Elementor: from n/a through <= 1.0.4. EPSS 0.2%Vulnerability merkulove	CVE Database V5	2025-12-31
Medium	5.4	EPSS 0.2%	CVE-2025-66152Criptopayer for Elementor (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.2%2025-12-31CVE Database V5CVE-2025-66152 Missing Authorization vulnerability in merkulove Criptopayer for Elementor criptopayer-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Criptopayer for Elementor: from n/a through <= 1.0.1. EPSS 0.2%Vulnerability merkulove	CVE Database V5	2025-12-31

Page 1 of 3