CVE-2026-119465Medium· 5.3▾ SunlitInsertion of Sensitive Information Into Sent Data vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder allows Retrieve Embedded Sensitive Data.This issue affects Elementor Addon Elements: from n/a t…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder allows Retrieve Embedded Sensitive Data.This issue affects Elementor Addon Elements: from n/a through 1.15.
addon-elements-for-elementor-page-builder <= 1.15Update the WordPress Elementor Addon Elements plugin to the latest available version (at least 1.15.1).
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-114183Medium· 6.5WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerability
CVE-2026-114184Medium· 6.5WordPress Elementor Addon Elements plugin <= 1.14.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-102564Medium· 6.5Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3.0 - Unauthenticated Arbitrary Shortcode Execution via Comment Content via do_shortcode() over rendered template buffer
CVE-2026-103914Medium· 6.5Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3 - Authenticated (Subscriber+) SQL Injection via 'q' Parameter
CVE-2026-119467Medium· 5.4WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability
CVE-2026-114187Medium· 5.3WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability