CVE-2025-66164

CVE-2025-66164 concerns the WordPress Laser plugin (<= 1.1.1) with a missing/weak authorization control that can allow access-level bypass due to improperly configured access controls. The initial description and multiple sources indicate the vulnerability is categorized as Missing Authorizati...