Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

wpvibes vulnerabilities

42 published CVEs name wpvibes among the affected products.

All 42 in the listAtom feed of new CVEs
Published CVEs
42
Last 12 months
11
Critical
1
Known exploited
0

Critical 1High 7Medium 34Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20238
  2. 202422
  3. 20252
  4. 202610

Newest CVEs

  • CVE-2026-114187

    WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability

    WPVibes · AnyWhere Elementor

    Medium5.3
  • CVE-2026-114185

    WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

    WPVibes · AnyWhere Elementor

    Medium6.5
  • CVE-2026-114183

    WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerability

    WPVibes · AnyWhere Elementor

    Medium6.5
  • CVE-2026-114184

    WordPress Elementor Addon Elements plugin <= 1.14.4 - Cross Site Scripting (XSS) vulnerability

    WPVibes · Elementor Addon Elements

    Medium6.5
  • CVE-2026-61947

    WordPress Form Vibes – Database Manager for Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability

    WPVibes · Form Vibes – Database Manager for Forms

    High7.1
  • CVE-2026-13378

    Form Vibes <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting via Contact Form 7 Form Field

    wpvibes · Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database

    High7.2
  • CVE-2023-33999

    WordPress WP Mail Log plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

    WPVibes · WP Mail Log

    High7.1
  • CVE-2026-28131

    WordPress Elementor Addon Elements plugin <= 1.14.4 - Sensitive Data Exposure vulnerability

    WPVibes · Elementor Addon Elements

    Medium6.5
  • CVE-2025-13409

    Form Vibes – Database Manager for Forms <= 1.4.13 - Authenticated (Admin+) SQL Injection

    wpvibes · Form Vibes – Database Manager for Forms

    Medium4.9
  • CVE-2025-31046

    WordPress AnyWhere Elementor Pro plugin <= 2.29 - Broken Access Control Vulnerability

    WPvibes · AnyWhere Elementor Pro

    Medium4.3

Products with the most CVEs

  1. Addon Elements for Elementor (formerly Elementor Addon Elements)21
  2. Elementor Addon Elements6
  3. Form Vibes – Database Manager for Forms5
  4. WP Mail Log4
  5. AnyWhere Elementor3
  6. Dynific Addons for Elementor (formerly AnyWhere Elementor)2
  7. AnyWhere Elementor Pro1
  8. Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database1
  9. Redirect 404 Error Page to Homepage or Custom Page with Logs1

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)23
  2. CWE-862 Missing authorization6
  3. CWE-352 Cross-site request forgery (CSRF)3
  4. CWE-89 SQL injection3
  5. CWE-201 2
  6. CWE-200 Exposure of sensitive information1
  7. CWE-22 Path traversal1
  8. CWE-359 1
  9. CWE-434 Unrestricted file upload1
  10. CWE-639 Authorization bypass through a user-controlled key (IDOR)1