CVEs we hold for Wpvibes
Records whose assigning authority named Wpvibes as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-61947WordPress Form Vibes – Database Manager for Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerabilityWPVibes Form Vibes – Database Manager for Forms
CVE-2026-28131WordPress Elementor Addon Elements plugin <= 1.14.4 - Sensitive Data Exposure vulnerabilityWPVibes Elementor Addon Elements
CVE-2026-13378Form Vibes <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting via Contact Form 7 Form Fieldwpvibes Form Vibes – Save Contact Form 7 & Elementor Form…
CVE-2025-31046WordPress AnyWhere Elementor Pro plugin <= 2.29 - Broken Access Control VulnerabilityWPvibes AnyWhere Elementor Pro
CVE-2025-13409Form Vibes – Database Manager for Forms <= 1.4.13 - Authenticated (Admin+) SQL Injectionwpvibes Form Vibes – Database Manager for Forms
CVE-2025-12537Addon Elements for Elementor <= 1.14.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpvibes Addon Elements for Elementor (formerly Elementor…
CVE-2024-8902Elementor Addon Elements <= 1.13.8 - Authenticated (Contributor+) Sensitive Information Exposure via…wpvibes Addon Elements for Elementor (formerly Elementor…
CVE-2024-7122Elementor Addon Elements <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgetswpvibes Addon Elements for Elementor (formerly Elementor…
CVE-2024-5325Form Vibes <= 1.4.10 - Authenticated (Subscriber+) SQL Injection via fv_export_datawpvibes Form Vibes – Database Manager for Forms
CVE-2024-5309Form Vibes – Database Manager for Forms <= 1.4.12 - Missing Authorization in Multiple Functionswpvibes Form Vibes – Database Manager for Forms
CVE-2024-47366WordPress Elementor Addon Elements plugin <= 1.13.6 - Cross Site Scripting (XSS) vulnerabilityWPVibes Elementor Addon Elements
CVE-2024-47361WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerabilityWPVibes Elementor Addon Elements
CVE-2024-4570Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpvibes Addon Elements for Elementor (formerly Elementor…
CVE-2024-4569Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpvibes Addon Elements for Elementor (formerly Elementor…
CVE-2024-4401Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and…wpvibes Addon Elements for Elementor (formerly Elementor…
CVE-2024-3743Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpvibes Addon Elements for Elementor (formerly Elementor…
CVE-2024-30422WordPress Elementor Addon Elements plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerabilityWPVibes Elementor Addon Elements
CVE-2024-29107WordPress Elementor Addon Elements plugin <= 1.12.10 - Cross Site Scripting (XSS) vulnerabilityWPVibes Elementor Addon Elements
CVE-2024-2792Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Text…wpvibes Addon Elements for Elementor (formerly Elementor…
CVE-2024-2092Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widgetwpvibes Addon Elements for Elementor (formerly Elementor…
CVE-2024-2091Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpvibes Addon Elements for Elementor (formerly Elementor…
CVE-2024-1422Elementor Addon Elements <= 1.12.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Modal Popup effetwpvibes Addon Elements for Elementor (formerly Elementor…
CVE-2024-1393Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Switcher…wpvibes Addon Elements for Elementor (formerly Elementor…
CVE-2024-1392Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dual Button Widgetwpvibes Addon Elements for Elementor (formerly Elementor…
CVE-2024-1391Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Thumbnail Slider…wpvibes Addon Elements for Elementor (formerly Elementor…
CVE-2024-1358Elementor Addon Elements <= 1.12.12 - Directory Traversal to Local File Inclusionwpvibes Addon Elements for Elementor (formerly Elementor…
CVE-2024-13215Elementor Addon Elements <= 1.13.10 - Authenticated (Contributor+) Sensitive Information Exposure via Modal Popupwpvibes Addon Elements for Elementor (formerly Elementor…
CVE-2024-10777AnyWhere Elementor <= 1.2.11 - Authenticated (Contributor+) Post Disclosurewpvibes Dynific Addons for Elementor (formerly AnyWhere…
CVE-2023-5381Elementor Addon Elements <= 1.12.7 - Authenticated (Administrator+) Stored Cross-Site Scriptingwpvibes Addon Elements for Elementor (formerly Elementor…
CVE-2023-51410WordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to Arbitrary File UploadWPVibes WP Mail Log
CVE-2023-47530WordPress Redirect 404 Error Page to Homepage or Custom Page with Logs Plugin <= 1.8.7 is vulnerable to SQL InjectionWPVibes Redirect 404 Error Page to Homepage or Custom Page…
CVE-2023-4723Elementor Addon Elements <= 1.12.7 - Missing Authorization to Sensitive Information Exposurewpvibes Addon Elements for Elementor (formerly Elementor…
CVE-2023-4690Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgerywpvibes Addon Elements for Elementor (formerly Elementor…
CVE-2023-4689Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgerywpvibes Addon Elements for Elementor (formerly Elementor…
CVE-2023-33999WordPress WP Mail Log plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerabilityWPVibes WP Mail Log
CVE-2023-3088WP Mail Log <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting via Emailwpvibes WP Mail Log
CVE-2022-45807WordPress WP Mail Log Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)WPVibes WP Mail Log
37 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.