PT-2026-21066 · Unknown · Miraculous Elementor

CVE-2025-67998 · Publicado 2026-02-20 · Atualizado 2026-02-22

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Miraculous Elementor versions through 2.0.7

Description An authentication bypass issue exists in Miraculous Elementor, potentially allowing authentication abuse through an alternate path or channel.

Recommendations Update Miraculous Elementor to a version later than 2.0.7.

Correção

Authentication Bypass Using an Alternate Path or Channel

Enumeração de Fraquezas

CWE-288

Identificadores relacionados

CVE-2025-67998

Produtos afetados

Miraculous Elementor

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-67998 · Nota de Segurança
• https://twitter.com/CVEnew/status/2025524050806620312 · Publicação no Twitter
• https://patchstack.com/database/Wordpress/Plugin/miraculous-el/vulnerability/wordpress-miraculous-elementor-plugin-2-0-7-broken-authentication-vulnerability?_s_id=cve · Nota