merkulove

Records43All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

merkulove records in CISA KEV

No merkulove vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Selection Lite 1 record LOW

Records

43 records

TI-2026-52005 CVE-2026-74015 · GHSA-fv7m-82qw-8434

WordPress Readabler plugin < 2.0.18 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in Readabler < 2.0.18 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.004 Published 2026-08-18 Fixed in 2.0.18 CWE-89

TI-2025-31492 CVE-2025-49444 · GHSA-f3fx-hxw6-4g3x

WordPress Reformer for Elementor plugin <= 1.0.5 - Arbitrary File Upload Vulnerability

MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in merkulove Reformer for Elementor reformer-elementor allows Upload a Web Shell to a Web Server.This issue affects Reformer for Elementor: from n/a through <…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00397 Published 2025-06-17 No fix listed CWE-434

TI-2025-42588 CVE-2025-69134 · GHSA-7hx3-543p-gqmx

WordPress OpenAI Chatbot for WordPress – Helper plugin <= 1.1.4 - Arbitrary Content Deletion vulnerability

LOW 39

Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Helper <= 1.1.4 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00426 Published 2026-07-02 No fix listed CWE-862

TI-2024-33877 CVE-2024-50445 · GHSA-4phr-f8p6-4r74

WordPress Selection Lite plugin <= 1.13 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in merkulove Selection Lite selection-lite allows Stored XSS.This issue affects Selection Lite: from n/a through <= 1.13.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00277 Published 2024-10-28 No fix listed CWE-79

TI-2026-41605 CVE-2026-57783 · GHSA-96pw-mfm3-j9q8

WordPress Speaker plugin <= 4.1.13 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in merkulove Speaker speaker allows Stored XSS.This issue affects Speaker: from n/a through <= 4.1.13.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-07-13 No fix listed CWE-79

TI-2024-28818 CVE-2024-43147 · GHSA-p5cq-hvqv-cwm3

WordPress Selection Lite plugin <= 1.11 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Merkulove Selection Lite allows Stored XSS.This issue affects Selection Lite: from n/a through 1.11.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00259 Published 2024-08-12 No fix listed CWE-79

TI-2025-41697 CVE-2025-68088 · GHSA-hqch-xp8p-9jmj

WordPress Huger for Elementor plugin <= 1.1.5 - Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in merkulove Huger for Elementor huger-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Huger for Elementor: from n/a through <= 1.1…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00164 Published 2025-12-16 No fix listed CWE-862

TI-2025-41696 CVE-2025-68087 · GHSA-c8ph-2xvf-c9p9

WordPress Modalier for Elementor plugin <= 1.0.6 - Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in merkulove Modalier for Elementor modalier-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modalier for Elementor: from n/a throu…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00164 Published 2025-12-16 No fix listed CWE-862

TI-2025-41695 CVE-2025-68086 · GHSA-3rgf-x42q-9hg8

WordPress Reformer for Elementor plugin <= 1.0.6 - Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in merkulove Reformer for Elementor reformer-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Reformer for Elementor: from n/a throu…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00164 Published 2025-12-16 No fix listed CWE-862

TI-2025-41694 CVE-2025-68085 · GHSA-f3vg-vfv2-qq64

WordPress Buttoner for Elementor plugin <= 1.0.6 - Settings Change vulnerability

LOW 24

Missing Authorization vulnerability in merkulove Buttoner for Elementor buttoner-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Buttoner for Elementor: from n/a throu…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00164 Published 2025-12-16 No fix listed CWE-862

TI-2025-40692 CVE-2025-66167 · GHSA-6ccm-r89r-8q3j

WordPress Lottier plugin <= 1.1.1 - Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in merkulove Lottier lottier-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lottier: from n/a through <= 1.1.1.