CVE Catalog

CVE-2026-114183

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Summary

Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Retrieve Embedded Sensitive Data. This issue affects AnyWhere Elementor: from n/a through 1.3.0.

Risk Assessment

An attacker may gain access to sensitive information embedded in data sent by the plugin, potentially leading to leakage of configuration data or other confidential information. This may facilitate further attacks.

Recommendation

Update the AnyWhere Elementor plugin to a version higher than 1.3.0. Until updated, review the plugin configuration for embedded credentials or sensitive data.

Other vulnerabilities in AnyWhere Elementor

See all
Original NVD description (English source)

Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Retrieve Embedded Sensitive Data.This issue affects AnyWhere Elementor: from n/a through 1.3.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS