Wpvibes

Anywhere Elementor

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2024-10777

  • EPSS 0.11%
  • Published 05.12.2024 10:31:38
  • Last modified 05.12.2024 10:31:38

The AnyWhere Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.11 via the 'INSERT_ELEMENTOR' shortcode due to insufficient restrictions on which posts can be included. This makes it possibl...

5.3

CVE-2023-0443

Exploit
  • EPSS 0.13%
  • Published 30.05.2023 08:15:09
  • Last modified 10.01.2025 21:15:09

The AnyWhere Elementor WordPress plugin before 1.2.8 discloses a Freemius Secret Key which could be used by an attacker to purchase the pro subscription using test credit card numbers without actually paying the amount. Such key has been revoked.