wpvibes vulnerabilities

CVEs per yearBy the year they were published

1. 20238
2. 202422
3. 20252
4. 202614

Newest CVEs

• CVE-2026-103914

  Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3 - Authenticated (Subscriber+) SQL Injection via 'q' Parameter

  wpvibes · Dynific Addons for Elementor (formerly Anywhere Elementor)

  Medium6.5
• CVE-2026-102564

  Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3.0 - Unauthenticated Arbitrary Shortcode Execution via Comment Content via do_shortcode() over rendered template buffer

  wpvibes · Dynific Addons for Elementor (formerly Anywhere Elementor)

  Medium6.5
• CVE-2026-119465

  WordPress Elementor Addon Elements plugin <= 1.15 - Sensitive Data Exposure vulnerability

  WPVibes · Elementor Addon Elements

  Medium5.3
• CVE-2026-119467

  WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability

  WPVibes · AnyWhere Elementor

  Medium5.4
• CVE-2026-114187

  WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability

  WPVibes · AnyWhere Elementor

  Medium5.3
• CVE-2026-114185

  WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

  WPVibes · AnyWhere Elementor

  Medium6.5
• CVE-2026-114183

  WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerability

  WPVibes · AnyWhere Elementor

  Medium6.5
• CVE-2026-114184

  WordPress Elementor Addon Elements plugin <= 1.14.4 - Cross Site Scripting (XSS) vulnerability

  WPVibes · Elementor Addon Elements

  Medium6.5
• CVE-2026-61947

  WordPress Form Vibes – Database Manager for Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability

  WPVibes · Form Vibes – Database Manager for Forms

  High7.1
• CVE-2026-13378

  Form Vibes <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting via Contact Form 7 Form Field

  wpvibes · Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database

  High7.2