CVE-2026-114187: Medium severity vulnerability

Published Nov 3, 2026

Updated

Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyWhere Elementor: from n/a through 1.3.0.

Event History

Nov 3, 2026

CVE Published

via NVD·05:17 PM

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The CVSS vector indicates that exploitation can be performed remotely over the network without authentication or user interaction, and requires low attack complexity.

What is the expected impact if exploitation succeeds?

The reported impact is limited to confidentiality, with no indicated integrity or availability impact. The issue is rated medium severity with a CVSS score of 5.3.

Which releases are reported as affected?

AnyWhere Elementor versions through 1.3.0 are reported as affected. The earliest affected version is not specified.

CVE-2026-114187: Medium severity vulnerability

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the expected impact if exploitation succeeds?

Which releases are reported as affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the expected impact if exploitation succeeds?

Which releases are reported as affected?