Known vulnerabilities in WPVibes Dynific Addons for Elementor (formerly AnyWhere Elementor)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-103914 | Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3 - Authenticated (Subscriber+) SQL Injection via 'q' Parameter | 6.5 Medium | Nov 7, 2026 |
| CVE-2026-102564 | Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3.0 - Unauthenticated Arbitrary Shortcode Execution via Comment Content via do_shortcode() over rendered template buffer | 6.5 Medium | Nov 7, 2026 |
| CVE-2024-10777 | The AnyWhere Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and… | 4.3 Medium | Dec 5, 2024 |
| CVE-2022-4974 | The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… | 6.3 Medium | Oct 16, 2024 |
Other WPVibes products
Addon Elements for Elementor (formerly Elementor Addon Elements) 21
AnyWhere Elementor 9
Elementor Addon Elements 7
Form Vibes – Database Manager for Forms 5
WP Mail Log 4
anywhere_elementor 1
AnyWhere Elementor Pro 1
form_vibes 1
Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database 1
Redirect 404 Error Page to Homepage or Custom Page with Logs 1