CVE-2025-68086

CVE-2025-68086 describes a Missing Authorization vulnerability in the WordPress plugin Reformer for Elementor (ReFormer) . Affected versions are up to 1.0.6 (inclusive). The issue arises from incorrectly configured access control, enabling improper access/or privilege escalation (as described by ...