Access Control Issue in Merkulove Lottier for WPBakery Plugin

CVE-2025-66165

What is CVE-2025-66165?

The Lottier for WPBakery plugin developed by Merkulove suffers from a missing authorization vulnerability. This issue is related to incorrectly configured access control security levels, which may enable unauthorized users to exploit the system, exposing sensitive data and functionalities. The vulnerability impacts all versions up to and including 1.1.7, making it crucial for users and administrators to take prompt action to secure their installations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References