VULNERABILITY INTELLIGENCE

CVE-2025-49444

CVSS score10 CRITICAL

EPSS probability0.40%

CISA KEVNot currently listed

Published2025-06-17

Last modified2026-06-17

Description

Unrestricted Upload of File with Dangerous Type vulnerability in merkulove Reformer for Elementor reformer-elementor allows Upload a Web Shell to a Web Server.This issue affects Reformer for Elementor: from n/a through <= 1.0.5.