Lucene search
+L

12 matches found

RedhatCVE
RedhatCVE
•added 2026/01/23 9:15 p.m.•12 views

CVE-2025-66140

Missing Authorization vulnerability in merkulove Uper for Elementor uper-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uper for Elementor: from n/a through = 1.0.5...

5.4CVSS5.4AI score0.00256EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/22 5:16 p.m.•10 views

CVE-2025-66140

Missing Authorization vulnerability in merkulove Uper for Elementor uper-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uper for Elementor: from n/a through = 1.0.5...

5.4CVSS0.00256EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/22 4:51 p.m.•33 views

CVE-2025-66140 WordPress Uper for Elementor plugin <= 1.0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in merkulove Uper for Elementor uper-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uper for Elementor: from n/a through = 1.0.5...

5.4CVSS0.00256EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/22 4:51 p.m.•5 views

CVE-2025-66140 WordPress Uper for Elementor plugin <= 1.0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in merkulove Uper for Elementor uper-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uper for Elementor: from n/a through = 1.0.5...

5.4CVSS5.9AI score0.00256EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/22 4:51 p.m.•6 views

CVE-2025-66140

Missing Authorization vulnerability in merkulove Uper for Elementor uper-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uper for Elementor: from n/a through = 1.0.5...

5.4CVSS5.3AI score0.00256EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/22 4:51 p.m.•23 views

CVE-2025-66140

CVE-2025-66140 is a Missing Authorization vulnerability in merkulove Uper for Elementor (plugin: Uper Elementer/merkulove Uper for Elementor). Affected versions are up to and including 1.0.5. The issue arises from incorrectly configured access control security levels. Public references and Red Ha...

5.4CVSS5.4AI score0.00256EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/22 12:00 a.m.•17 views

WordPress plugin Uper for Elementor has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added to a...

5.4CVSS5.8AI score0.00256EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•0 views

CVE-2025-66140: Missing Authorization

Missing Authorization vulnerability in merkulove Uper for Elementor uper-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uper for Elementor: from n/a through = 1.0.5...

5.4CVSS5.9AI score0.00256EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•24 views

PT-2026-4009

Name of the Vulnerable Software and Affected Versions merkulove Uper for Elementor versions through 1.0.5 Description An authorization issue exists in merkulove Uper for Elementor. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access...

5.3AI score0.00256EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/12/10 7:01 a.m.•10 views

WordPress Uper for Elementor plugin <= 1.0.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Uper for Elementor versions = 1.0.5...

5.4CVSS7AI score0.00256EPSS
SaveExploits0Affected Software1
Snyk
Snyk
•added 2025/08/22 4:46 p.m.•7 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS due to the failure to enforce INTEGER constraints in the UPER decoding process when the bound is positive and exceeds 32 bits. An attacker can cause the processing of incorrect or malicious input by supplying...

9.8CVSS5.3AI score0.00369EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/22 12:00 a.m.•1 views

CVE-2025-55398: Improper Validation of Specified Quantity in Input

An issue was discovered in mouse07410 asn1c thru 0.9.29 2025-03-20 - a fork of vlm asn1c. In UPER Unaligned Packed Encoding Rules, asn1c-generated decoders fail to enforce INTEGER constraints when the bound is positive and exceeds 32 bits in length, potentially allowing incorrect or malicious inp...

9.8CVSS5.8AI score0.00369EPSS
SaveExploits0References1
Rows per page
Query Builder