Skip to content
OpenAdvisories
High · 7.3 Scanner template CVE-2025-68043 EUVD-2025-208073GHSA-p52x-wxj2-j8jr

WordPress LottieFiles plugin <= 3.0.0 - Broken Access Control vulnerability

Published Feb 20, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in LottieFiles LottieFiles lottiefiles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LottieFiles: from n/a through <= 3.0.0.

Affected products

VendorProductAffectedFixed
LottieFiles LottieFiles ≤ 3.0.0 —

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References