Authorization Flaw in Coder for Elementor Plugin by Merkulove
CVE-2025-66147

Currently unrated

Key Information:

Vendor

WordPress

Vendor
CVE Published:
16 December 2025

What is CVE-2025-66147?

A missing authorization vulnerability exists in the Coder for Elementor plugin, enabling attackers to exploit incorrectly configured access control security levels. This issue can lead to unauthorized access and manipulation of sensitive data, thereby compromising website integrity. It impacts versions up to 1.0.13, and users are advised to update or implement patches as soon as available to secure their installations.

Affected Version(s)

Coder for Elementor <= n/a

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Phat RiO - BlueRock | Patchstack Bug Bounty Program
.
CVE-2025-66147 : Authorization Flaw in Coder for Elementor Plugin by Merkulove