Access Control Vulnerability in Lottier for Elementor by merkulove
CVE-2025-66166
Currently unrated
What is CVE-2025-66166?
A missing authorization vulnerability has been identified in Lottier for Elementor by merkulove, allowing for exploitation via incorrectly configured access control security levels. This security flaw can potentially allow unauthorized users to gain higher privileges than intended, posing a significant risk for websites utilizing this plugin. Users are advised to review their access settings and update to the latest version of the plugin to mitigate potential attacks.
Affected Version(s)
Lottier for Elementor <= n/a