CVE-2026-117524

The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin, in versions before 1.3.1 , is vulnerable to an arbitrary post content disclosure flaw. The root cause is a failure to perform necessary status or capability checks when resolving post identifiers provided via the dyn...

CVE-2026-117524 Dynific Addons for Elementor 1.3 - Contributor+ Arbitrary Post Content Disclosure via dynific_template Shortcode

The Dynific Addons for Elementor formerly Anywhere Elementor WordPress plugin before 1.3.1 does not perform a status or capability check when resolving post identifiers passed to one of its shortcodes, allowing authenticated users with at least the Contributor role to disclose the content of othe...