Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-08
Anywhere Elementor - Security Vulnerability (CVE-2026-114189)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Blind SQL Injection.This issue affects AnyWhere Elementor: from n/a through 1.3.0.
PLUGIN
Anywhere Elementor
CVE-2026-114189
Risk Score
Threat Entry
Updated 2026-11-08
Anywhere Elementor - Security Vulnerability (CVE-2026-114188)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Stored XSS.This issue affects AnyWhere Elementor: from n/a through 1.3.0.
PLUGIN
Anywhere Elementor
CVE-2026-114188
Risk Score
Threat Entry
Updated 2026-11-08
Anywhere Elementor - Security Vulnerability (CVE-2026-114186)
Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyWhere Elementor: from n/a through 1.3.0.
PLUGIN
Anywhere Elementor
CVE-2026-114186
Risk Score
Threat Entry
Updated 2026-11-08
Anywhere Elementor - Security Vulnerability (CVE-2026-103914)
The Dynific Addons for Elementor plugin for WordPress is vulnerable to SQL Injection via the 'q' parameter in versions up to, and including, 1.3. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query in the ae_preview_post() AJAX handler and its preview_post_filter() posts_where callback, where the value is passed through $wpdb->esc_like() (addcslashes for '_%\\') and concatenated into a single-quoted SQL LIKE literal — a construction that does not escape single quotes and actively escapes the backslash wp_magic_quotes places before…
PLUGIN
Anywhere Elementor
CVE-2026-103914
Risk Score
Threat Entry
Updated 2026-11-08
Anywhere Elementor - Security Vulnerability (CVE-2026-102564)
The The Dynific Addons for Elementor (formerly Anywhere Elementor) plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.3.0 This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. Exploitation requires the target site to have a public post rendered through an AE template that includes the AE Post Comments widget, and for the attacker's comment to be visible on…
PLUGIN
Anywhere Elementor
CVE-2026-102564
Risk Score
Threat Entry
Updated 2026-11-07
Anywhere Elementor - Security Vulnerability (CVE-2026-119467)
Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyWhere Elementor: from n/a through 1.3.0.
PLUGIN
Anywhere Elementor
CVE-2026-119467
Risk Score
Threat Entry
Updated 2026-11-03
Anywhere Elementor - Security Vulnerability (CVE-2026-114185)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Stored XSS.This issue affects AnyWhere Elementor: from n/a through 1.3.0.
PLUGIN
Anywhere Elementor
CVE-2026-114185
Risk Score
Threat Entry
Updated 2026-11-07
Anywhere Elementor - Security Vulnerability (CVE-2026-114183)
Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Retrieve Embedded Sensitive Data.This issue affects AnyWhere Elementor: from n/a through 1.3.0.
PLUGIN
Anywhere Elementor
CVE-2026-114183
Risk Score
Threat Entry
Updated 2026-11-04
Anywhere Elementor - Security Vulnerability (CVE-2026-114187)
Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyWhere Elementor: from n/a through 1.3.0.
PLUGIN
Anywhere Elementor
CVE-2026-114187
Risk Score
Threat Entry
Updated 2026-06-17
AnyWhere Elementor - Information Disclosure (CVE-2024-10777)
The AnyWhere Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.11 via the 'INSERT_ELEMENTOR' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to.
PLUGIN
AnyWhere Elementor
CVE-2024-10777
Risk Score
Threat Entry
Updated 2026-06-17
Anywhere Elementor - Security Vulnerability (CVE-2023-0443)
The AnyWhere Elementor WordPress plugin before 1.2.8 discloses a Freemius Secret Key which could be used by an attacker to purchase the pro subscription using test credit card numbers without actually paying the amount. Such key has been revoked.
PLUGIN
Anywhere Elementor
CVE-2023-0443
Risk Score