CVE-2025-66152 - WordPress Criptopayer for Elementor plugin <= 1.0.1 - broken access control vuln...

CVE-2025-66152 - WordPress Criptopayer for Elementor plugin <= 1.0.1 - broken access control vuln...

CVE ID : CVE-2025-66152 Published : Dec. 31, 2025, 6:32 p.m. | 37 minutes ago Description : Missing Authorization vulnerability in merkulove Criptopayer for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Criptopayer for Elementor: from n/a through 1.0.1. Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
Dec. 31, 2025

Source: Telegram CVE Monitor