# cve.now: Merkulove

The newest entries naming Merkulove as an affected vendor (up to 200), of 43 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-74015](https://cve.now/CVE-2026-74015.md): WordPress Readabler plugin \< 2.0.18 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2026-57783](https://cve.now/CVE-2026-57783.md): WordPress Speaker plugin \<= 4.1.13 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2025-69134](https://cve.now/CVE-2025-69134.md): WordPress OpenAI Chatbot for WordPress – Helper plugin \<= 1.1.4 - Arbitrary Content Deletion vulnerability (CVSS 7.5)
- [CVE-2025-66143](https://cve.now/CVE-2025-66143.md): WordPress Crumber plugin \<= 1.0.10 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66142](https://cve.now/CVE-2025-66142.md): WordPress Comparimager for Elementor plugin \<= 1.0.1 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66141](https://cve.now/CVE-2025-66141.md): WordPress Scroller plugin \<= 2.0.2 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66140](https://cve.now/CVE-2025-66140.md): WordPress Uper for Elementor plugin \<= 1.0.5 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66139](https://cve.now/CVE-2025-66139.md): WordPress Audier For Elementor plugin \<= 1.0.9 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66138](https://cve.now/CVE-2025-66138.md): WordPress Motionger for Elementor plugin \<= 2.0.4 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66137](https://cve.now/CVE-2025-66137.md): WordPress Searcher for Elementor plugin \<= 1.0.3 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66136](https://cve.now/CVE-2025-66136.md): WordPress Carter for Elementor plugin \<= 1.0.2 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66135](https://cve.now/CVE-2025-66135.md): WordPress Imager for Elementor plugin \<= 2.0.4 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66144](https://cve.now/CVE-2025-66144.md): WordPress Worker for Elementor plugin \<= 1.0.10 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66145](https://cve.now/CVE-2025-66145.md): WordPress Worker for WPBakery plugin \<= 1.1.1 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66146](https://cve.now/CVE-2025-66146.md): WordPress Logger for Elementor plugin \<= 1.0.9 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66148](https://cve.now/CVE-2025-66148.md): WordPress Conformer for Elementor plugin \<= 1.0.7 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66149](https://cve.now/CVE-2025-66149.md): WordPress UnGrabber plugin \<= 3.1.3 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66150](https://cve.now/CVE-2025-66150.md): WordPress Appender plugin \<= 1.1.1 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66151](https://cve.now/CVE-2025-66151.md): WordPress Countdowner for Elementor plugin \<= 1.0.4 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66152](https://cve.now/CVE-2025-66152.md): WordPress Criptopayer for Elementor plugin \<= 1.0.1 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66153](https://cve.now/CVE-2025-66153.md): WordPress Headinger for Elementor plugin \<= 1.1.4 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66154](https://cve.now/CVE-2025-66154.md): WordPress Couponer for Elementor plugin \<= 1.1.7 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66155](https://cve.now/CVE-2025-66155.md): WordPress Questionar for Elementor plugin \<= 1.1.7 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66156](https://cve.now/CVE-2025-66156.md): WordPress Watcher for Elementor plugin \<= 1.0.9 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66157](https://cve.now/CVE-2025-66157.md): WordPress Sliper for Elementor plugin \<= 1.0.10 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66158](https://cve.now/CVE-2025-66158.md): WordPress Gmaper for Elementor plugin \<= 1.0.9 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66159](https://cve.now/CVE-2025-66159.md): WordPress Walker for Elementor plugin \<= 1.1.6 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66160](https://cve.now/CVE-2025-66160.md): WordPress Select Graphist for Elementor Graphist for Elementor plugin \<= 1.2.10 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-68088](https://cve.now/CVE-2025-68088.md): WordPress Huger for Elementor plugin \<= 1.1.5 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-68087](https://cve.now/CVE-2025-68087.md): WordPress Modalier for Elementor plugin \<= 1.0.6 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-68086](https://cve.now/CVE-2025-68086.md): WordPress Reformer for Elementor plugin \<= 1.0.6 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-68085](https://cve.now/CVE-2025-68085.md): WordPress Buttoner for Elementor plugin \<= 1.0.6 - Settings Change vulnerability (CVSS 5.4)
- [CVE-2025-66167](https://cve.now/CVE-2025-66167.md): WordPress Lottier plugin \<= 1.1.1 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66166](https://cve.now/CVE-2025-66166.md): WordPress Lottier for Elementor plugin \<= 1.0.9 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66165](https://cve.now/CVE-2025-66165.md): WordPress Lottier for WPBakery plugin \<= 1.1.7 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66164](https://cve.now/CVE-2025-66164.md): WordPress Laser plugin \<= 1.1.1 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66163](https://cve.now/CVE-2025-66163.md): WordPress Masker for Elementor plugin \<= 1.1.4 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66162](https://cve.now/CVE-2025-66162.md): WordPress Spoter for Elementor plugin \<= 1.04 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66161](https://cve.now/CVE-2025-66161.md): WordPress Grider for Elementor plugin \<= 1.0.8 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-66147](https://cve.now/CVE-2025-66147.md): WordPress Coder for Elementor plugin \<= 1.0.13 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-49444](https://cve.now/CVE-2025-49444.md): WordPress Reformer for Elementor plugin \<= 1.0.5 - Arbitrary File Upload Vulnerability (CVSS 10.0)
- [CVE-2024-50445](https://cve.now/CVE-2024-50445.md): WordPress Selection Lite plugin \<= 1.13 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-43147](https://cve.now/CVE-2024-43147.md): WordPress Selection Lite plugin \<= 1.11 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/merkulove
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.