Lucene search
WPScanCVELIST:CVE-2023-0443HistoryMay 30, 2023 - 7:49 a.m.
CVE-2023-0443 AnyWhere Elementor < 1.2.8 - Freemius API Key Disclosure
2023-05-3007:49:18
WPScan
www.cve.org
cve-2023-0443
wordpress plugin
freemius
api key
disclosure
security
0.001 Low
EPSS
Percentile
24.9%
The AnyWhere Elementor WordPress plugin before 1.2.8 discloses a Freemius Secret Key which could be used by an attacker to purchase the pro subscription using test credit card numbers without actually paying the amount. Such key has been revoked.
CNA Affected
[
{
"vendor": "Unknown",
"product": "AnyWhere Elementor",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "1.2.5",
"lessThan": "1.2.8"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
nvd
nvd
CVE-2023-0443
2023-05-30 08:15:09
wpvulndb
wpvulndb
AnyWhere Elementor < 1.2.8 - Freemius API Key Disclosure
2023-05-02 00:00:00
cve
cve
CVE-2023-0443
2023-05-30 08:15:09
prion
prion
Design/Logic Flaw
2023-05-30 08:15:00
wpexploit
wpexploit
AnyWhere Elementor < 1.2.8 - Freemius API Key Disclosure
2023-05-02 00:00:00
wordfence
wordfence