VULNERABILITY INTELLIGENCE

CVE-2025-66140

CVSS score5.4 MEDIUM

EPSS probability0.26%

CISA KEVNot currently listed

Published2026-01-22

Last modified2026-06-17

Description

Missing Authorization vulnerability in merkulove Uper for Elementor uper-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uper for Elementor: from n/a through <= 1.0.5.