CVE Intelligence

Merkulove vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Merkulove products: 40 record(s), with severity, exploitation and fixes.

Audier For Elementor 1Countdowner for Elementor 1Worker for Elementor 1Worker for WPBakery 1Logger for Elementor 1Conformer for Elementor 1Imager for Elementor 1Carter for Elementor 1Searcher for Elementor 1Motionger for Elementor 1Appender 1Uper for Elementor 1Scroller 1Comparimager for Elementor 1Crumber 1OpenAI Chatbot for WordPress – Helper 1Criptopayer for Elementor 1Headinger for Elementor 1Speaker 1Readabler 1Modalier for Elementor 1Grider for Elementor 1Spoter for Elementor 1Masker for Elementor 1Laser 1Lottier for WPBakery 1Lottier 1Lottier for Elementor 1Buttoner for Elementor 1Reformer for Elementor 1Coder for Elementor 1Huger for Elementor 1Couponer for Elementor 1Questionar for Elementor 1Watcher for Elementor 1Sliper for Elementor 1Gmaper for Elementor 1Walker for Elementor 1Select Graphist for Elementor Graphist for Elementor 1UnGrabber 1

Exploited only (KEV) →

CVE-2026-74015 Critical · 9.3 CWE-89 Aug 18, 2026
WordPress Readabler plugin < 2.0.18 - SQL Injection vulnerability
Unauthenticated SQL Injection in Readabler < 2.0.18 versions.
CVE-2026-57783 Medium · 6.5 CWE-79 Jul 13, 2026
WordPress Speaker plugin <= 4.1.13 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in merkulove Speaker speaker allows Stored XSS.This issue affects Speaker: from n/a through <= 4.1.13.
CVE-2025-69134 High · 7.5 CWE-862 Jul 2, 2026
WordPress OpenAI Chatbot for WordPress – Helper plugin <= 1.1.4 - Arbitrary Content Deletion vulnerability
Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Helper <= 1.1.4 versions.
CVE-2025-66143 Medium · 5.4 CWE-862 Jan 22, 2026
WordPress Crumber plugin <= 1.0.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Crumber crumber-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Crumber: from n/a through <= 1.0.10.
CVE-2025-66142 Medium · 5.4 CWE-862 Jan 22, 2026
WordPress Comparimager for Elementor plugin <= 1.0.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Comparimager for Elementor comparimager-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Comparimager for Elementor: from n/a through <= 1.0.1.
CVE-2025-66141 Medium · 5.4 CWE-862 Jan 22, 2026
WordPress Scroller plugin <= 2.0.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Scroller scroller allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Scroller: from n/a through <= 2.0.2.
CVE-2025-66140 Medium · 5.4 CWE-862 Jan 22, 2026
WordPress Uper for Elementor plugin <= 1.0.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Uper for Elementor uper-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uper for Elementor: from n/a through <= 1.0.5.
CVE-2025-66139 Medium · 5.4 CWE-862 Jan 22, 2026
WordPress Audier For Elementor plugin <= 1.0.9 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Audier For Elementor audier-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Audier For Elementor: from n/a through <= 1.0.9.
CVE-2025-66138 Medium · 5.4 CWE-862 Jan 22, 2026
WordPress Motionger for Elementor plugin <= 2.0.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Motionger for Elementor motionger-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motionger for Elementor: from n/a through <= 2.0.4.
CVE-2025-66137 Medium · 5.4 CWE-862 Jan 22, 2026
WordPress Searcher for Elementor plugin <= 1.0.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Searcher for Elementor searcher-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Searcher for Elementor: from n/a through <= 1.0.3.
CVE-2025-66136 Medium · 5.4 CWE-862 Jan 22, 2026
WordPress Carter for Elementor plugin <= 1.0.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Carter for Elementor carter-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Carter for Elementor: from n/a through <= 1.0.2.
CVE-2025-66135 Medium · 5.4 CWE-862 Jan 22, 2026
WordPress Imager for Elementor plugin <= 2.0.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Imager for Elementor imager-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Imager for Elementor: from n/a through <= 2.0.4.
CVE-2025-66148 Medium · 5.4 CWE-862 Dec 31, 2025
WordPress Conformer for Elementor plugin <= 1.0.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Conformer for Elementor conformer-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Conformer for Elementor: from n/a through <= 1.0.7.
CVE-2025-66146 Medium · 5.4 CWE-862 Dec 31, 2025
WordPress Logger for Elementor plugin <= 1.0.9 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Logger for Elementor logger-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Logger for Elementor: from n/a through <= 1.0.9.
CVE-2025-66145 Medium · 5.4 CWE-862 Dec 31, 2025
WordPress Worker for WPBakery plugin <= 1.1.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Worker for WPBakery worker-wpbakery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Worker for WPBakery: from n/a through <= 1.1.1.
CVE-2025-66144 Medium · 5.4 CWE-862 Dec 31, 2025
WordPress Worker for Elementor plugin <= 1.0.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Worker for Elementor worker-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Worker for Elementor: from n/a through <= 1.0.10.
CVE-2025-66153 Medium · 5.4 CWE-862 Dec 31, 2025
WordPress Headinger for Elementor plugin <= 1.1.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Headinger for Elementor headinger-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Headinger for Elementor: from n/a through <= 1.1.4.
CVE-2025-66152 Medium · 5.4 CWE-862 Dec 31, 2025
WordPress Criptopayer for Elementor plugin <= 1.0.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Criptopayer for Elementor criptopayer-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Criptopayer for Elementor: from n/a through <= 1.0.1.
CVE-2025-66151 Medium · 5.4 CWE-862 Dec 31, 2025
WordPress Countdowner for Elementor plugin <= 1.0.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Countdowner for Elementor countdowner-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Countdowner for Elementor: from n/a through <= 1.0.4.
CVE-2025-66150 Medium · 5.4 CWE-862 Dec 31, 2025
WordPress Appender plugin <= 1.1.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Appender appender allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Appender: from n/a through <= 1.1.1.
CVE-2025-66149 Medium · 5.4 CWE-862 Dec 31, 2025
WordPress UnGrabber plugin <= 3.1.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove UnGrabber ungrabber allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UnGrabber: from n/a through <= 3.1.3.
CVE-2025-66160 Medium · 5.4 CWE-862 Dec 31, 2025
WordPress Select Graphist for Elementor Graphist for Elementor plugin <= 1.2.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Select Graphist for Elementor Graphist for Elementor graphist-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Select Graphist for Elementor Graphist for Elementor: from n/a through <= 1.2.10.
CVE-2025-66159 Medium · 5.4 CWE-862 Dec 31, 2025
WordPress Walker for Elementor plugin <= 1.1.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Walker for Elementor walker-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Walker for Elementor: from n/a through <= 1.1.6.
CVE-2025-66158 Medium · 5.4 CWE-862 Dec 31, 2025
WordPress Gmaper for Elementor plugin <= 1.0.9 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Gmaper for Elementor gmaper-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gmaper for Elementor: from n/a through <= 1.0.9.
CVE-2025-66157 Medium · 5.4 CWE-862 Dec 31, 2025
WordPress Sliper for Elementor plugin <= 1.0.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Sliper for Elementor sliper-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sliper for Elementor: from n/a through <= 1.0.10.