No recent security news found for Merkulove.
| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2025-66142 PoC | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.01% | 2026-01-22 |
| CVE-2025-66141 PoC | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.01% | 2026-01-22 |
| CVE-2025-66139 PoC | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.05% | 2026-01-22 |
| CVE-2025-66138 PoC | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.05% | 2026-01-22 |
| CVE-2025-66137 PoC | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.05% | 2026-01-22 |
| CVE-2025-66136 PoC | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.01% | 2026-01-22 |
| CVE-2025-66135 PoC | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.05% | 2026-01-22 |
| CVE-2025-66143 PoC | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.07% | 2026-01-22 |
| CVE-2025-66140 PoC | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.05% | 2026-01-22 |
| CVE-2025-66148 PoC | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.05% | 2025-12-31 |
| CVE-2025-66146 PoC | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.06% | 2025-12-31 |
| CVE-2025-66145 PoC | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.06% | 2025-12-31 |
| CVE-2025-66144 PoC | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.06% | 2025-12-31 |
| CVE-2025-66153 PoC | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.05% | 2025-12-31 |
| CVE-2025-66152 PoC | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.05% | 2025-12-31 |
| CVE-2025-66151 PoC | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.05% | 2025-12-31 |
| CVE-2025-66150 PoC | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.05% | 2025-12-31 |
| CVE-2025-66149 PoC | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.05% | 2025-12-31 |
| CVE-2025-66160 PoC | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.01% | 2025-12-31 |
| CVE-2025-66159 PoC | 5.4 MEDIUM | PATCH UNDER REVIEW | 0.02% | 2025-12-31 |
Merkulove is a Ukrainian-based software development company specializing in premium WordPress plugins and themes for e-commerce, security, and performance optimization. Their products, such as the 'Merkulove Security' plugin, are used by website owners to enhance site protection, but the vendor has been associated with multiple security vulnerabilities tracked in CVE databases. The company's significance in cybersecurity stems from the widespread use of their plugins, which can introduce risks if not properly maintained.
Based on 1 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.