Skip to content
OpenAdvisories

Vendor

WPVibes

49 known vulnerabilities.

Products

Addon Elements for Elementor (formerly Elementor Addon Elements) 20 Elementor Addon Elements 8 AnyWhere Elementor 7 WP Mail Log 4 Form Vibes – Database Manager for Forms 4 Dynific Addons for Elementor (formerly AnyWhere Elementor) 3 Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database 1 AnyWhere Elementor Pro 1 Redirect 404 Error Page to Homepage or Custom Page with Logs 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.5
    CVE-2026-114189

    WordPress AnyWhere Elementor plugin <= 1.3.0 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Blind SQL Injection.This issue affects AnyWhere Elementor: from n/a through 1.3.0.

    WPVibes AnyWhere Elementor
  • High 7.1
    CVE-2026-61947

    WordPress Form Vibes – Database Manager for Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Form Vibes – Database Manager for Forms <= 1.5.2 versions.

    WPVibes Form Vibes – Database Manager for Forms
  • High 7.2
    CVE-2026-13378

    Form Vibes <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting via Contact Form 7 Form Field

    The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form 7 Form Field in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it p…

    WPVibes Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database Web / CMS
  • High 7.1
    CVE-2023-33999

    WordPress WP Mail Log plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in WPVibes WP Mail Log allows DOM-Based XSS. This issue affects WP Mail Log: from n/a through 1.0.2.

    WPVibes WP Mail Log
  • High 8.8
    CVE-2024-5325

    Form Vibes <= 1.4.10 - Authenticated (Subscriber+) SQL Injection via fv_export_data

    The Form Vibes plugin for WordPress is vulnerable to SQL Injection via the ‘fv_export_data’ parameter in all versions up to, and including, 1.4.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S…

    WPVibes Form Vibes – Database Manager for Forms Web / CMS
  • High 8.8
    CVE-2024-1358

    Elementor Addon Elements <= 1.12.12 - Directory Traversal to Local File Inclusion

    The Elementor Addon Elements plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.12.12 via the render function. This makes it possible for authenticated attackers, with contributor access or higher, to include the…

    WPVibes Addon Elements for Elementor (formerly Elementor Addon Elements) Web / CMS
  • High 7.6
    CVE-2023-47530

    WordPress Redirect 404 Error Page to Homepage or Custom Page with Logs Plugin <= 1.8.7 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPVibes Redirect 404 Error Page to Homepage or Custom Page with Logs allows SQL Injection.This issue affects Redirect 404 Error Page to Homepage or Custom Pa…

    WPVibes Redirect 404 Error Page to Homepage or Custom Page with Logs
  • High 7.2
    CVE-2023-3088

    WP Mail Log <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting via Email

    The WP Mail Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to in…

    WPVibes WP Mail Log Web / CMS