Skip to contentWpvibes Anywhere Elementor vulnerabilities
- unknown dynific addons for elementor (formerly anywhere elementor)Dynific Addons for Elementor 1.3 - Contributor+ Arbitrary Post Content Disclosure via dynific_template ShortcodeCVE-2026-1175242.7 Low
- unknown dynific addons for elementor (formerly anywhere elementor)Dynific Addons for Elementor < 1.3.1 - Subscriber+ Module Settings Update via aep_module AJAX ActionCVE-2026-1175234.3 Medium
- unknown dynific addons for elementor (formerly anywhere elementor)Dynific Addons for Elementor < 1.3.1 - Author+ Stored XSS via Post Title in Post Image WidgetCVE-2026-1175226.8 Medium
- unknown dynific addons for elementor (formerly anywhere elementor)Dynific Addons for Elementor < 1.3.1 - Author+ Stored XSS via Display Name in Post Author WidgetCVE-2026-1175216.8 Medium
- wpvibes anywhere elementorWordPress AnyWhere Elementor plugin <= 1.3.0 - SQL Injection vulnerabilityCVE-2026-1141898.5 High
- wpvibes anywhere elementorWordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerabilityCVE-2026-1141866.5 Medium
- wpvibes anywhere elementorWordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1141886.5 Medium
- wpvibes dynific addons for elementor (formerly anywhere elementor)Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3 - Authenticated (Subscriber+) SQL Injection via 'q' ParameterCVE-2026-1039146.5 Medium
- wpvibes dynific addons for elementor (formerly anywhere elementor)Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3.0 - Unauthenticated Arbitrary Shortcode Execution via Comment Content via do_shortcode() over rendered template bufferCVE-2026-1025646.5 Medium
- wpvibes anywhere elementorWordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerabilityCVE-2026-1194675.4 Medium
- wpvibes anywhere elementorWordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerabilityCVE-2026-1141875.3 Medium
- wpvibes anywhere elementorWordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1141856.5 Medium
- wpvibes anywhere elementorWordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerabilityCVE-2026-1141836.5 Medium
- wpvibes anywhere elementor proWordPress AnyWhere Elementor Pro plugin <= 2.29 - Broken Access Control VulnerabilityCVE-2025-310464.3 Medium
- wpvibes dynific addons for elementor (formerly anywhere elementor)AnyWhere Elementor <= 1.2.11 - Authenticated (Contributor+) Post DisclosureCVE-2024-107774.3 Medium
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- unknown anywhere elementorAnyWhere Elementor < 1.2.8 - Freemius API Key DisclosureCVE-2023-04435.3 Medium