Wpvibes vulnerabilities
49 CVEs and advisories name Wpvibes as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-114186WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability
- CVE-2026-114189WordPress AnyWhere Elementor plugin <= 1.3.0 - SQL Injection vulnerability
- CVE-2026-114188WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-103914Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3 - Authenticated (Subscriber+) SQL Injection via 'q' Parameter
- CVE-2026-102564Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3.0 - Unauthenticated Arbitrary Shortcode Execution via Comment Content…
- CVE-2026-119465WordPress Elementor Addon Elements plugin <= 1.15 - Sensitive Data Exposure vulnerability
- CVE-2026-119467WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability
- CVE-2026-114187WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability
- CVE-2026-114185WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-114183WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerability
- CVE-2026-114184WordPress Elementor Addon Elements plugin <= 1.14.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-61947WordPress Form Vibes – Database Manager for Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-13378Form Vibes <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting via Contact Form 7 Form Field
- CVE-2023-33999WordPress WP Mail Log plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2026-28131WordPress Elementor Addon Elements plugin <= 1.14.4 - Sensitive Data Exposure vulnerability
- CVE-2025-13409Form Vibes – Database Manager for Forms <= 1.4.13 - Authenticated (Admin+) SQL Injection
- CVE-2025-31046WordPress AnyWhere Elementor Pro plugin <= 2.29 - Broken Access Control Vulnerability
- CVE-2025-12537Addon Elements for Elementor <= 1.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-13215Elementor Addon Elements <= 1.13.10 - Authenticated (Contributor+) Sensitive Information Exposure via Modal Popup
- CVE-2024-10777AnyWhere Elementor <= 1.2.11 - Authenticated (Contributor+) Post Disclosure
- CVE-2024-47361WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerability
- CVE-2022-4974Freemius SDK <= 2.4.2 - Missing Authorization Checks
- CVE-2024-8902Elementor Addon Elements <= 1.13.8 - Authenticated (Contributor+) Sensitive Information Exposure via table_saved_sections
- CVE-2024-47366WordPress Elementor Addon Elements plugin <= 1.13.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-5309Form Vibes – Database Manager for Forms <= 1.4.12 - Missing Authorization in Multiple Functions
- CVE-2024-7122Elementor Addon Elements <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
- CVE-2024-4401Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_animation Parameters
- CVE-2024-5325Form Vibes <= 1.4.10 - Authenticated (Subscriber+) SQL Injection via fv_export_data
- CVE-2024-4570Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-4569Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting