PT-2026-21066 · Unknown · Miraculous Elementor

Published 2026-02-20 · Updated 2026-02-22 · CVE-2025-67998

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Miraculous Elementor versions through 2.0.7

Description An authentication bypass issue exists in Miraculous Elementor, potentially allowing authentication abuse through an alternate path or channel.

Recommendations Update Miraculous Elementor to a version later than 2.0.7.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2025-67998

Affected Products

Miraculous Elementor

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-67998 · Security Note
• https://twitter.com/CVEnew/status/2025524050806620312 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/miraculous-el/vulnerability/wordpress-miraculous-elementor-plugin-2-0-7-broken-authentication-vulnerability?_s_id=cve · Note