CVE-2026-117523

The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin, prior to version 1.3.1 , is vulnerable to an authorization bypass. The root cause is a lack of capability or nonce checks on an AJAX action used to save module configurations. This allows any authenticated user , inc...