Log in Start free

WPVibes

Products

ProductCVEsExploitedLatest
Addon Elements for Elementor (formerly Elementor Addon Elements)20–Dec 14, 2025
Elementor Addon Elements7–Nov 7, 2026
Form Vibes – Database Manager for Forms4–Jul 23, 2026
AnyWhere Elementor4–Nov 7, 2026
WP Mail Log4–Jun 11, 2026
Dynific Addons for Elementor (formerly AnyWhere Elementor)3–Nov 7, 2026
AnyWhere Elementor Pro1–Jan 5, 2026
Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database1–Jul 11, 2026
Redirect 404 Error Page to Homepage or Custom Page with Logs1–Dec 18, 2023

Exploited and recent CVEs

  • CVE-2026-103914 Medium 6.5 Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3 - Authenticated (Subscriber+) SQL Injection via 'q' Parameter –
  • CVE-2026-102564 Medium 6.5 Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3.0 - Unauthenticated Arbitrary Shortcode Execution via Comment Content via do_shortcode() over rendered template buffer –
  • CVE-2026-119465 Medium 5.3 WordPress Elementor Addon Elements plugin <= 1.15 - Sensitive Data Exposure vulnerability –
  • CVE-2026-119467 Medium 5.4 WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability –
  • CVE-2026-114187 Medium 5.3 WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability 0.2%
  • CVE-2026-114185 Medium 6.5 WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-114183 Medium 6.5 WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-114184 Medium 6.5 WordPress Elementor Addon Elements plugin <= 1.14.4 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-61947 High 7.1 WordPress Form Vibes – Database Manager for Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-13378 High 7.2 Form Vibes <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting via Contact Form 7 Form Field 0.4%
  • CVE-2023-33999 High 7.1 WordPress WP Mail Log plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-28131 Medium 6.5 WordPress Elementor Addon Elements plugin <= 1.14.4 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2025-13409 Medium 4.9 Form Vibes – Database Manager for Forms <= 1.4.13 - Authenticated (Admin+) SQL Injection 0.3%
  • CVE-2025-31046 Medium 4.3 WordPress AnyWhere Elementor Pro plugin <= 2.29 - Broken Access Control Vulnerability 0.2%
  • CVE-2025-12537 Medium 6.4 Addon Elements for Elementor <= 1.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2024-13215 Medium 4.3 Elementor Addon Elements <= 1.13.10 - Authenticated (Contributor+) Sensitive Information Exposure via Modal Popup 0.5%
  • CVE-2024-10777 Medium 4.3 AnyWhere Elementor <= 1.2.11 - Authenticated (Contributor+) Post Disclosure 0.3%
  • CVE-2024-47361 Medium 6.5 WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerability 0.4%
  • CVE-2024-8902 Medium 4.3 Elementor Addon Elements <= 1.13.8 - Authenticated (Contributor+) Sensitive Information Exposure via table_saved_sections 0.4%
  • CVE-2024-47366 Medium 6.5 WordPress Elementor Addon Elements plugin <= 1.13.6 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-5309 Medium 5.4 Form Vibes – Database Manager for Forms <= 1.4.12 - Missing Authorization in Multiple Functions 0.3%
  • CVE-2024-7122 Medium 6.4 Elementor Addon Elements <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets 0.4%
  • CVE-2024-4401 Medium 6.4 Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_animation Parameters 0.3%
  • CVE-2024-5325 High 8.8 Form Vibes <= 1.4.10 - Authenticated (Subscriber+) SQL Injection via fv_export_data 0.5%
  • CVE-2024-4570 Medium 6.4 Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-4569 Medium 6.4 Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
  • CVE-2024-2092 Medium 5.4 Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widget 0.3%
  • CVE-2024-3743 Medium 6.4 Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.6%
  • CVE-2024-2792 Medium 6.4 Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Text Separator' and 'Image Compare' Widget 0.5%
  • CVE-2024-30422 Medium 6.5 WordPress Elementor Addon Elements plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability 0.3%