CVE-2026-114187
MediumCVSS 5.3Summary
Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AnyWhere Elementor: from n/a through 1.3.0.
Risk Assessment
An unauthenticated or low-privileged user may perform actions they should not be able to, potentially modifying site configuration or data. This could lead to partial site compromise.
Recommendation
Update the AnyWhere Elementor plugin to a version higher than 1.3.0. If updating is not possible, consider disabling the plugin until a fix is released.
Other vulnerabilities in AnyWhere Elementor
See all- CVE-2026-114185Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Stored XSS. This issue affects AnyWhere Elementor: from n/a through 1.3.0.
- CVE-2026-114183Medium
Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Retrieve Embedded Sensitive Data. This issue affects AnyWhere Elementor: from n/a through 1.3.0.
Original NVD description (English source)
Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyWhere Elementor: from n/a through 1.3.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS