EUVD-2026-123170

The Dynific Addons for Elementor formerly Anywhere Elementor WordPress plugin before 1.3.1 does not perform a capability or nonce check on an AJAX action that saves its module configuration, allowing any authenticated user, including Subscribers, to enable or disable the Dynific Addons for...