Lucene search
Sanjay DasWPEX-ID:471F3226-8F90-43D1-B826-F11EF4BBD602HistoryMay 02, 2023 - 12:00 a.m.
AnyWhere Elementor < 1.2.8 - Freemius API Key Disclosure
2023-05-0200:00:00
Sanjay Das
63
anywhere elementor
freemius api key
disclosure
exploit
0.001 Low
EPSS
Percentile
24.9%
The plugin discloses a Freemius Secret Key which could be used by an attacker to purchase the pro subscription using test credit card numbers without actually paying the amount. Such key has been revoked.
See the disclosed secret key in `includes/pro.php`.Related
cvelist
cvelist
CVE-2023-0443 AnyWhere Elementor < 1.2.8 - Freemius API Key Disclosure
2023-05-30 07:49:18
nvd
nvd
CVE-2023-0443
2023-05-30 08:15:09
wpvulndb
wpvulndb
AnyWhere Elementor < 1.2.8 - Freemius API Key Disclosure
2023-05-02 00:00:00
cve
cve
CVE-2023-0443
2023-05-30 08:15:09
prion
prion
Design/Logic Flaw
2023-05-30 08:15:00
wordfence
wordfence