Live › vulnerability › CVE-2026-114183
The WPVibes AnyWhere Elementor WordPress plugin sends sensitive information inside data it returns to users. An attacker can retrieve that embedded sensitive data.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 17:21 UTC. All times on this page are UTC.
Sites running the AnyWhere Elementor plugin from WPVibes at version 1.3.0 or earlier, as listed in NVD. The sources do not say which configurations or pages expose the data, so the exact exposure path is unknown.
No product ranges from the sources yet.
anywhere-elementor plugin is installed on the WordPress site and note its version.1.3.0).No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Retrieve Embedded Sensitive Data.This issue affects AnyWhere Elementor: from n/a through 1.3.0.
This page as .md · .json · in your agent: get_signal("CVE-2026-114183")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.