CVE-2026-119467Medium· 5.4▾ SunlitMissing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyWhere Elementor: from n/a through 1.3.0.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyWhere Elementor: from n/a through 1.3.0.
anywhere-elementor <= 1.3.0Update the WordPress AnyWhere Elementor plugin to the latest available version (at least 1.3.1).
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-114187Medium· 5.3WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability
CVE-2026-114185Medium· 6.5WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-114183Medium· 6.5WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerability
CVE-2026-102564Medium· 6.5Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3.0 - Unauthenticated Arbitrary Shortcode Execution via Comment Content via do_shortcode() over rendered template buffer
CVE-2026-103914Medium· 6.5Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3 - Authenticated (Subscriber+) SQL Injection via 'q' Parameter
CVE-2026-119465Medium· 5.3WordPress Elementor Addon Elements plugin <= 1.15 - Sensitive Data Exposure vulnerability