Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

wpvibes vulnerabilities

49 published CVEs name wpvibes among the affected products.

All 49 in the listAtom feed of new CVEs
Published CVEs
49
Last 12 months
18
Critical
1
Known exploited
0

Critical 1High 8Medium 40Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20238
  2. 202422
  3. 20252
  4. 202617

Newest CVEs

  • CVE-2026-114186

    WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability

    WPVibes · AnyWhere Elementor

    Medium6.5
  • CVE-2026-114189

    WordPress AnyWhere Elementor plugin <= 1.3.0 - SQL Injection vulnerability

    WPVibes · AnyWhere Elementor

    High8.5
  • CVE-2026-114188

    WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

    WPVibes · AnyWhere Elementor

    Medium6.5
  • CVE-2026-103914

    Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3 - Authenticated (Subscriber+) SQL Injection via 'q' Parameter

    wpvibes · Dynific Addons for Elementor (formerly Anywhere Elementor)

    Medium6.5
  • CVE-2026-102564

    Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3.0 - Unauthenticated Arbitrary Shortcode Execution via Comment Content via do_shortcode() over rendered template buffer

    wpvibes · Dynific Addons for Elementor (formerly Anywhere Elementor)

    Medium6.5
  • CVE-2026-119465

    WordPress Elementor Addon Elements plugin <= 1.15 - Sensitive Data Exposure vulnerability

    WPVibes · Elementor Addon Elements

    Medium5.3
  • CVE-2026-119467

    WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability

    WPVibes · AnyWhere Elementor

    Medium5.4
  • CVE-2026-114187

    WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability

    WPVibes · AnyWhere Elementor

    Medium5.3
  • CVE-2026-114185

    WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

    WPVibes · AnyWhere Elementor

    Medium6.5
  • CVE-2026-114183

    WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerability

    WPVibes · AnyWhere Elementor

    Medium6.5

Products with the most CVEs

  1. Addon Elements for Elementor (formerly Elementor Addon Elements)21
  2. AnyWhere Elementor7
  3. Elementor Addon Elements7
  4. Form Vibes – Database Manager for Forms5
  5. Dynific Addons for Elementor (formerly AnyWhere Elementor)4
  6. WP Mail Log4
  7. AnyWhere Elementor Pro1
  8. Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database1
  9. Redirect 404 Error Page to Homepage or Custom Page with Logs1

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)24
  2. CWE-862 Missing authorization8
  3. CWE-89 SQL injection5
  4. CWE-201 3
  5. CWE-352 Cross-site request forgery (CSRF)3
  6. CWE-200 Exposure of sensitive information1
  7. CWE-22 Path traversal1
  8. CWE-359 1
  9. CWE-434 Unrestricted file upload1
  10. CWE-639 Authorization bypass through a user-controlled key (IDOR)1