CVE-2026-117523

The Dynific Addons for Elementor formerly Anywhere Elementor WordPress plugin before 1.3.1 does not perform a capability or nonce check on an AJAX action that saves its module configuration, allowing any authenticated user, including Subscribers, to enable or disable the Dynific Addons for...