PT-2025-51425 · Elementor+1 · Elementor+1

Published 2025-12-16 · Updated 2025-12-17 · CVE-2025-66162

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions merkulove Spoter for Elementor versions through 1.04

Description An issue exists in merkulove Spoter for Elementor related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue involves a missing authorization check.

Recommendations Update merkulove Spoter for Elementor to a version newer than 1.04.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-66162

Affected Products

Elementor

Spoter For Elementor

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-66162 · Security Note
• https://twitter.com/CVEnew/status/2001365773445374200 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/spoter-elementor/vulnerability/wordpress-spoter-for-elementor-plugin-1-04-broken-access-control-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/spoter-elementor/vulnerability/wordpress-spoter-for-elementor-plugin-1-04-broken-access-control-vulnerability?_s_id=cve · Note