Lucene search
+L

43 matches found

NVD
NVD
•added 2026/11/03 5:17 p.m.•5 views

CVE-2026-114187

Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyWhere Elementor: from n/a through 1.3.0...

5.3CVSS
SaveExploits0References1
NVD
NVD
•added 2026/11/03 5:17 p.m.•5 views

CVE-2026-114185

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Stored XSS.This issue affects AnyWhere Elementor: from n/a through 1.3.0...

6.5CVSS
SaveExploits0References1
EUVD
EUVD
•added 2026/11/03 5:01 p.m.•5 views

EUVD-2026-116095

Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyWhere Elementor: from n/a through 1.3.0...

5.3CVSS6AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/03 5:01 p.m.•15 views

CVE-2026-114187 WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyWhere Elementor: from n/a through 1.3.0...

5.3CVSS
SaveExploits0References1
CVE
CVE
•added 2026/11/03 5:01 p.m.•9 views

CVE-2026-114187

The AnyWhere Elementor plugin (WPVibes) for WordPress, versions up to and including 1.3.0 , is susceptible to a Broken Access Control vulnerability (CWE-862). The root cause is incorrectly configured access control security levels , which allows for the exploitation of missing authorization. This...

5.3CVSS6AI score
SaveExploits0References1
CVE
CVE
•added 2026/11/03 4:59 p.m.•8 views

CVE-2026-114185

The WPVibes AnyWhere Elementor plugin (anywhere-elementor) is vulnerable to Stored Cross-site Scripting (XSS) in versions up to and including 1.3.0 . The root cause is the improper neutralization of input during web page generation. This vulnerability allows an attacker to store malicious scripts...

6.5CVSS5.9AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/11/03 4:59 p.m.•5 views

EUVD-2026-116092

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Stored XSS.This issue affects AnyWhere Elementor: from n/a through 1.3.0...

6.5CVSS5.9AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/03 4:59 p.m.•12 views

CVE-2026-114185 WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Stored XSS.This issue affects AnyWhere Elementor: from n/a through 1.3.0...

6.5CVSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/11/03 4:58 p.m.•4 views

WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin AnyWhere Elementor versions = 1.3.0...

6.5CVSS5.8AI score
SaveExploits0Affected Software1
EUVD
EUVD
•added 2026/11/03 4:49 p.m.•5 views

EUVD-2026-116087

Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Retrieve Embedded Sensitive Data.This issue affects AnyWhere Elementor: from n/a through 1.3.0...

6.5CVSS5.9AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/03 4:49 p.m.•11 views

CVE-2026-114183 WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Retrieve Embedded Sensitive Data.This issue affects AnyWhere Elementor: from n/a through 1.3.0...

6.5CVSS
SaveExploits0References1
CVE
CVE
•added 2026/11/03 4:49 p.m.•7 views

CVE-2026-114183

The AnyWhere Elementor plugin for WordPress (versions up to and including 1.3.0 ) is susceptible to a Sensitive Data Exposure vulnerability (CWE-201). This flaw in the anywhere-elementor component allows an attacker to Retrieve Embedded Sensitive Data from the sent data. The vulnerability has a C...

6.5CVSS5.9AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/03 12:00 a.m.•3 views

CVE-2026-114185: WPVibes AnyWhere Elementor: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes AnyWhere…

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Stored XSS.This issue affects AnyWhere Elementor: from n/a through 1.3.0...

6.5CVSS5.9AI score
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/03 12:00 a.m.•3 views

CVE-2026-114187: WPVibes AnyWhere Elementor: Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly…

Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyWhere Elementor: from n/a through 1.3.0...

5.3CVSS6.1AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/06 11:14 a.m.•32 views

CVE-2025-31046

Missing Authorization vulnerability in WPvibes AnyWhere Elementor Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyWhere Elementor Pro: from n/a through 2.29...

4.3CVSS8.5AI score0.00181EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/05 11:17 a.m.•27 views

CVE-2025-31046

Missing Authorization vulnerability in WPvibes AnyWhere Elementor Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyWhere Elementor Pro: from n/a through 2.29...

4.3CVSS0.00181EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/05 10:24 a.m.•49 views

CVE-2025-31046 WordPress AnyWhere Elementor Pro plugin <= 2.29 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WPvibes AnyWhere Elementor Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyWhere Elementor Pro: from n/a through 2.29...

4.3CVSS0.00181EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/05 10:24 a.m.•60 views

CVE-2025-31046

CVE-2025-31046 affects the WordPress plugin WPvibes AnyWhere Elementor Pro up to version 2.29. The issue is a Missing Authorization / Broken Access Control vulnerability, allowing exploitation due to incorrectly configured access control security levels. Public sources in connected documents cons...

4.3CVSS8.2AI score0.00181EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/05 10:24 a.m.•16 views

CVE-2025-31046 WordPress AnyWhere Elementor Pro plugin <= 2.29 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WPvibes AnyWhere Elementor Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyWhere Elementor Pro: from n/a through 2.29...

4.3CVSS8.2AI score0.00181EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/05 12:00 a.m.•31 views

WordPress plugin AnyWhere Elementor Pro has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS8.3AI score0.00181EPSS
SaveExploits0References2
Rows per page
Query Builder