Known Vulnerabilities for AnyWhere Elementor by WPVibes
Listed below are 1 of the newest known vulnerabilities associated with "AnyWhere Elementor" by "WPVibes".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-120524 json | The News Kit Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formData' parame... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-119365 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Media Player A... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-118500 json | The Cool FormKit Lite – Advanced Form Builder for Elementor plugin for WordPress is vulnerable to Stored DOM-Based Cross-Si... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-118205 json | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Privilege ... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-118164 json | The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vulnerable to Stored Cros... | Not Provided | 2026-10-28 | 2026-10-28 |
| CVE-2026-118077 json | Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions. | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-118073 json | Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions. | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-116850 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Happy Addons for... | Not Provided | 2026-10-29 | 2026-10-29 |
| CVE-2026-116848 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Innovations Th... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-115950 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Smart Widgets Better... | Not Provided | 2026-10-26 | 2026-10-26 |