CVE-2026-114183: WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerability

Q: What level of access does an attacker need to exploit this issue?

The vulnerability requires low-privileged access. It is remotely exploitable and does not require user interaction.

Q: What is the potential impact if exploited?

An attacker may retrieve embedded sensitive data. The reported impact is limited to confidentiality; integrity and availability are not affected.

Q: Which plugin versions are affected?

AnyWhere Elementor versions through 1.3.0 are affected. The available data does not identify a fixed version.

Published Nov 3, 2026

Updated

Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Retrieve Embedded Sensitive Data.This issue affects AnyWhere Elementor: from n/a through 1.3.0.

Event History

Nov 3, 2026

CVE Published

via MITRE·04:49 PM

Data Sourced

via MITRE·04:49 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The vulnerability requires low-privileged access. It is remotely exploitable and does not require user interaction.

What is the potential impact if exploited?

An attacker may retrieve embedded sensitive data. The reported impact is limited to confidentiality; integrity and availability are not affected.

Which plugin versions are affected?

AnyWhere Elementor versions through 1.3.0 are affected. The available data does not identify a fixed version.

CVE-2026-114183: WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerability

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploited?

Which plugin versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploited?

Which plugin versions are affected?