Wpvibes vulnerabilities

Products

• Addon Elements For Elementor (formerly Elementor Addon Elements) 21
• Elementor Addon Elements 9
• Wp Mail Log 8
• Anywhere Elementor 5
• Form Vibes – Database Manager For Forms 5
• Dynific Addons For Elementor (formerly Anywhere Elementor) 4
• Wp Mail Log 4
• Form Vibes 3
• Anywhere Elementor 2
• Redirect 404 Error Page To Homepage Or Custom Page With Logs 2
• Redirect 404 Error Page To Homepage Or Custom Page With Logs 2

Newest

• wpvibes dynific addons for elementor (formerly anywhere elementor) Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3 - Authenticated (Subscriber+) SQL Injection via 'q' Parameter CVE-2026-103914 6.5 MediumNovember 7, 2026
• wpvibes dynific addons for elementor (formerly anywhere elementor) Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3.0 - Unauthenticated Arbitrary Shortcode Execution via Comment Content via do_shortcode() over rendered template buffer CVE-2026-102564 6.5 MediumNovember 7, 2026
• wpvibes elementor addon elements WordPress Elementor Addon Elements plugin <= 1.15 - Sensitive Data Exposure vulnerability CVE-2026-119465 5.3 MediumNovember 7, 2026
• wpvibes anywhere elementor WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability CVE-2026-119467 5.4 MediumNovember 7, 2026
• wpvibes anywhere elementor WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability CVE-2026-114187 5.3 MediumNovember 3, 2026
• wpvibes anywhere elementor WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-114185 6.5 MediumNovember 3, 2026
• wpvibes anywhere elementor WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerability CVE-2026-114183 6.5 MediumNovember 3, 2026
• wpvibes elementor addon elements WordPress Elementor Addon Elements plugin <= 1.14.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-114184 6.5 MediumOctober 22, 2026
• wpvibes form vibes – database manager for forms WordPress Form Vibes – Database Manager for Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-61947 7.1 HighJuly 23, 2026
• wpvibes form vibes – save contact form 7 & elementor form entries to database Form Vibes <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting via Contact Form 7 Form Field CVE-2026-13378 7.2 HighJuly 11, 2026
• unknown wp mail log WordPress WP Mail Log plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2023-33999 7.1 HighJune 11, 2026
• wpvibes elementor addon elements WordPress Elementor Addon Elements plugin <= 1.14.4 - Sensitive Data Exposure vulnerability CVE-2026-28131 6.5 MediumFebruary 26, 2026
• wpvibes form vibes – database manager for forms Form Vibes – Database Manager for Forms <= 1.4.13 - Authenticated (Admin+) SQL Injection CVE-2025-13409 4.9 MediumJanuary 6, 2026
• wpvibes anywhere elementor pro WordPress AnyWhere Elementor Pro plugin <= 2.29 - Broken Access Control Vulnerability CVE-2025-31046 4.3 MediumJanuary 5, 2026
• wpvibes addon elements for elementor (formerly elementor addon elements) Addon Elements for Elementor <= 1.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-12537 6.4 MediumDecember 14, 2025
• webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 more Elementor Addon Elements <= 1.13.10 - Authenticated (Contributor+) Sensitive Information Exposure via Modal Popup CVE-2024-13215 4.3 MediumJanuary 15, 2025
• wpvibes dynific addons for elementor (formerly anywhere elementor) AnyWhere Elementor <= 1.2.11 - Authenticated (Contributor+) Post Disclosure CVE-2024-10777 4.3 MediumDecember 5, 2024
• webtechstreet elementor addon elements WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerability CVE-2024-47361 6.5 MediumNovember 1, 2024
• 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
• webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 more Elementor Addon Elements <= 1.13.8 - Authenticated (Contributor+) Sensitive Information Exposure via table_saved_sections CVE-2024-8902 4.3 MediumOctober 12, 2024
• webtechstreet elementor addon elements WordPress Elementor Addon Elements plugin <= 1.13.6 - Cross Site Scripting (XSS) vulnerability CVE-2024-47366 6.5 MediumOctober 6, 2024
• wpvibes form vibes – database manager for forms, form vibes +1 more Form Vibes – Database Manager for Forms <= 1.4.12 - Missing Authorization in Multiple Functions CVE-2024-5309 5.4 MediumSeptember 5, 2024
• webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 more Elementor Addon Elements <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets CVE-2024-7122 6.4 MediumAugust 30, 2024
• webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 more Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_animation Parameters CVE-2024-4401 6.4 MediumAugust 30, 2024
• wpvibes form vibes, form vibes – database manager for forms +1 more Form Vibes <= 1.4.10 - Authenticated (Subscriber+) SQL Injection via fv_export_data CVE-2024-5325 8.8 HighJuly 12, 2024
• webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 more Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-4570 6.4 MediumJune 27, 2024
• webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 more Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-4569 6.4 MediumJune 27, 2024
• webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 more Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widget CVE-2024-2092 5.4 MediumJune 12, 2024
• webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 more Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-3743 6.4 MediumMay 2, 2024
• webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 more Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Text Separator' and 'Image Compare' Widget CVE-2024-2792 6.4 MediumApril 9, 2024
• webtechstreet elementor addon elements WordPress Elementor Addon Elements plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-30422 6.5 MediumMarch 28, 2024
• webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 more Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-2091 5.4 MediumMarch 28, 2024
• webtechstreet elementor addon elements WordPress Elementor Addon Elements plugin <= 1.12.10 - Cross Site Scripting (XSS) vulnerability CVE-2024-29107 6.5 MediumMarch 19, 2024
• webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 more Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Switcher Widget CVE-2024-1393 6.4 MediumMarch 13, 2024
• webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 more Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Thumbnail Slider Widget CVE-2024-1391 6.4 MediumMarch 13, 2024
• webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 more Elementor Addon Elements <= 1.12.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Modal Popup effet CVE-2024-1422 6.4 MediumMarch 13, 2024
• webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 more Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dual Button Widget CVE-2024-1392 6.4 MediumMarch 13, 2024
• webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements), anywhere elementor +2 more Elementor Addon Elements <= 1.12.12 - Directory Traversal to Local File Inclusion CVE-2024-1358 8.8 HighMarch 13, 2024
• webtechstreet elementor addon elements The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting... CVE-2024-0834 6.4 MediumFebruary 5, 2024
• unknown form vibes Form Vibes < 1.4.5 - Admin+ SQLi CVE-2022-3764 7.2 HighJanuary 16, 2024
• unknown wp mail log WordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to Arbitrary File Upload CVE-2023-51410 9.9 CriticalDecember 29, 2023
• unknown wp mail log WP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpoint CVE-2023-5672 6.5 MediumDecember 26, 2023
• unknown wp mail log WP Mail Log < 1.1.3 – Incorrect Authorization in REST API Endpoints CVE-2023-5644 7.6 HighDecember 26, 2023
• unknown wp mail log WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs endpoint CVE-2023-5645 8.8 HighDecember 26, 2023
• unknown wp mail log WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs/send_mail endpoint CVE-2023-5674 EPSS 10.8% 8.8 HighDecember 26, 2023
• unknown wp mail log WP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCE CVE-2023-5673 8.8 HighDecember 26, 2023
• wpvibes redirect 404 error page to homepage or custom page with logs WordPress Redirect 404 Error Page to Homepage or Custom Page with Logs Plugin <= 1.8.7 is vulnerable to SQL Injection CVE-2023-47530 7.6 HighDecember 18, 2023
• webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 more Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery CVE-2023-4690 5.4 MediumNovember 15, 2023
• webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 more Elementor Addon Elements <= 1.12.7 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-5381 4.4 MediumNovember 15, 2023
• webtechstreet elementor addon elements, wpvibes addon elements for elementor (formerly elementor addon elements) +1 more Elementor Addon Elements <= 1.12.7 - Missing Authorization to Sensitive Information Exposure CVE-2023-4723 5.3 MediumNovember 15, 2023
• Show olderLoading…