CVE-2025-66160 | THREATINT

Description

Missing Authorization vulnerability in merkulove Select Graphist for Elementor Graphist for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Select Graphist for Elementor Graphist for Elementor: from n/a through 1.2.10.

PUBLISHED Reserved 2025-11-21 | Published 2025-12-31 | Updated 2025-12-31 | Assigner Patchstack

MEDIUM: 5.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Problem types

CWE-862 Missing Authorization

Product status

Default status

unaffected

Any version

affected

Credits

Phat RiO - BlueRock | Patchstack Bug Bounty Program finder

References

vdp.patchstack.com/...access-control-vulnerability?_s_id=cve vdb-entry

cve.org (CVE-2025-66160)

nvd.nist.gov (CVE-2025-66160)

Download JSON