Untriaged
Permalink
CVE-2025-66164
5.4 MEDIUM
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): LOW
- Privileges required (PR): LOW
- User interaction (UI): NONE
- Scope (S): UNCHANGED
- Confidentiality impact (C): LOW
- Integrity impact (I): LOW
- Availability impact (A): NONE
WordPress Laser plugin <= 1.1.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Laser laser allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Laser: from n/a through <= 1.1.1.
References
Affected products
laser
- =<<= 1.1.1
Matching in nixpkgs
pkgs.brlaser
CUPS driver for Brother laser printers
pkgs.dell-530cdn
None
-
nixos-unstable 5130cdn-Color-Laser-1.3-1
- nixpkgs-unstable 5130cdn-Color-Laser-1.3-1
- nixos-unstable-small 5130cdn-Color-Laser-1.3-1
-
nixos-25.11 5130cdn-Color-Laser-1.3-1
- nixpkgs-25.11-darwin 5130cdn-Color-Laser-1.3-1
pkgs.ooklaserver
Ookla TCP based server daemon that provides standalone testing
pkgs.haskellPackages.lasercutter
A high-powered, single-pass tree parser
pkgs.python312Packages.toptica-lasersdk
TOPTICA Python Laser SDK
Package maintainers
-
@onny Jonas Heinrich <onny@project-insanity.org>
-
@NeverBehave Xinhao Luo <i@never.pet>
-
@doronbehar Doron Behar <me@doronbehar.com>