Read the docs

wpvibes

Records54All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

wpvibes records in CISA KEV

No wpvibes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Mail Log 8 records HIGH Form Vibes 3 records HIGH Redirect 404 Error Page To Homepage Or Custom Page With Logs 2 records LOW Anywhere Elementor 1 record MEDIUM

Records

1 record in Anywhere Elementor · all components

TI-2023-00420 CVE-2023-0443 · GHSA-frc2-4fxv-jmxx

AnyWhere Elementor < 1.2.8 - Freemius API Key Disclosure

Priority MEDIUM 63

The AnyWhere Elementor WordPress plugin before 1.2.8 discloses a Freemius Secret Key which could be used by an attacker to purchase the pro subscription using test credit card numbers without actually paying the amount.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0062 Published 2023-05-30 Fixed in 1.2.8
Open these records in search →