Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

43 records

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in merkulove Speaker speaker allows Stored XSS.This issue affects Speaker: from n/a through <= 4.1.13.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-07-13 No fix listed CWE-79
Priority LOW 24

Missing Authorization vulnerability in merkulove Crumber crumber-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Crumber: from n/a through <= 1.0.10.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00327 Published 2026-01-22 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove Comparimager for Elementor comparimager-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Comparimager for Elementor: fr…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00272 Published 2026-01-22 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove Scroller scroller allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Scroller: from n/a through <= 2.0.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00272 Published 2026-01-22 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove Uper for Elementor uper-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uper for Elementor: from n/a through <= 1.0.5.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00262 Published 2026-01-22 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove Audier For Elementor audier-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Audier For Elementor: from n/a through <=…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00262 Published 2026-01-22 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove Motionger for Elementor motionger-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motionger for Elementor: from n/a th…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00262 Published 2026-01-22 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove Searcher for Elementor searcher-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Searcher for Elementor: from n/a throu…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00262 Published 2026-01-22 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove Carter for Elementor carter-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Carter for Elementor: from n/a through <=…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00272 Published 2026-01-22 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove Imager for Elementor imager-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Imager for Elementor: from n/a through <=…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00262 Published 2026-01-22 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove Worker for Elementor worker-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Worker for Elementor: from n/a through <=…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00202 Published 2025-12-31 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove Worker for WPBakery worker-wpbakery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Worker for WPBakery: from n/a through <= 1.1…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00202 Published 2025-12-31 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove Logger for Elementor logger-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Logger for Elementor: from n/a through <=…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00202 Published 2025-12-31 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove Conformer for Elementor conformer-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Conformer for Elementor: from n/a th…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00202 Published 2025-12-31 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove UnGrabber ungrabber allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UnGrabber: from n/a through <= 3.1.3.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00202 Published 2025-12-31 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove Appender appender allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Appender: from n/a through <= 1.1.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00202 Published 2025-12-31 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove Countdowner for Elementor countdowner-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Countdowner for Elementor: from…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00202 Published 2025-12-31 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove Criptopayer for Elementor criptopayer-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Criptopayer for Elementor: from…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00202 Published 2025-12-31 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove Headinger for Elementor headinger-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Headinger for Elementor: from n/a th…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00202 Published 2025-12-31 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove Couponer for Elementor couponer-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Couponer for Elementor: from n/a throu…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00245 Published 2025-12-31 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove Questionar for Elementor questionar-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Questionar for Elementor: from n/a…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00245 Published 2025-12-31 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove Watcher for Elementor watcher-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Watcher for Elementor: from n/a through…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00245 Published 2025-12-31 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in merkulove Sliper for Elementor sliper-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sliper for Elementor: from n/a through <=…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00245 Published 2025-12-31 No fix listed CWE-862
Load more