CVE-2026-114183
MediumCVSS 6.5Summary
Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Retrieve Embedded Sensitive Data. This issue affects AnyWhere Elementor: from n/a through 1.3.0.
Risk Assessment
An attacker may gain access to sensitive information embedded in data sent by the plugin, potentially leading to leakage of configuration data or other confidential information. This may facilitate further attacks.
Recommendation
Update the AnyWhere Elementor plugin to a version higher than 1.3.0. Until updated, review the plugin configuration for embedded credentials or sensitive data.
Other vulnerabilities in AnyWhere Elementor
See all- CVE-2026-114187Medium
Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AnyWhere Elementor: from n/a through 1.3.0.
- CVE-2026-114185Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Stored XSS. This issue affects AnyWhere Elementor: from n/a through 1.3.0.
Original NVD description (English source)
Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Retrieve Embedded Sensitive Data.This issue affects AnyWhere Elementor: from n/a through 1.3.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

