Login Request a demo
WP
Vendor
WPVibes
10 products with CVEs on record
30
CVEs
0
On KEV
1
New 30D
Products
EA
Elementor Addon Elements
WPVibes
8.8
4 CVEs0 on KEV1 new
WM
WP Mail Log
WPVibes
8.8
9 CVEs0 on KEV0 new
AE
Addon Elements for Elementor (formerly Elementor Addon Elements)
wpvibes
6.4
5 CVEs0 on KEV0 new
FV
Form Vibes
Wpvibes
7.2
3 CVEs0 on KEV0 new
FV
Form Vibes – Database Manager for Forms
wpvibes
7.1
3 CVEs0 on KEV0 new
R4
Redirect 404 Error Page TO Homepage OR Custom Page With Logs
Wpvibes
7.2
2 CVEs0 on KEV0 new
AE
Anywhere Elementor
Wpvibes
5.3
1 CVEs0 on KEV0 new
AE
AnyWhere Elementor Pro
WPvibes
4.3
1 CVEs0 on KEV0 new
DA
Dynific Addons for Elementor (formerly AnyWhere Elementor)
wpvibes
4.3
1 CVEs0 on KEV0 new
FV
Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database
wpvibes
7.2
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-114184
EA
Elementor Addon Elements
WPVibes
6.5
0%
Oct 22WordPress Elementor Addon Elements plugin <= 1.14.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-61947
FV
Form Vibes – Database Manager for Forms
WPVibes
7.1
0%
Jul 23WordPress Form Vibes – Database Manager for Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-13378
FV
Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database
wpvibes
7.2
0%
Jul 11Form Vibes <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting via Contact Form 7 Form Field
CVE-2023-33999
WM
WP Mail Log
WPVibes
7.1
0%
Jun 11WordPress WP Mail Log plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-28131
EA
Elementor Addon Elements
WPVibes
6.5
0%
Feb 26WordPress Elementor Addon Elements plugin <= 1.14.4 - Sensitive Data Exposure vulnerability
CVE-2025-13409
FV
Form Vibes – Database Manager for Forms
wpvibes
4.9
0%
Jan 6Form Vibes – Database Manager for Forms <= 1.4.13 - Authenticated (Admin+) SQL Injection
CVE-2025-31046
AE
AnyWhere Elementor Pro
WPvibes
4.3
0%
Jan 5WordPress AnyWhere Elementor Pro plugin <= 2.29 - Broken Access Control Vulnerability
CVE-2025-12537
AE
Addon Elements for Elementor (formerly Elementor Addon Elements)
wpvibes
6.4
0%
Dec 14Addon Elements for Elementor <= 1.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-13215
AE
Addon Elements for Elementor (formerly Elementor Addon Elements)
wpvibes
4.3
1%
Jan 15Elementor Addon Elements <= 1.13.10 - Authenticated (Contributor+) Sensitive Information Exposure via Modal Popup
CVE-2024-10777
DA
Dynific Addons for Elementor (formerly AnyWhere Elementor)
wpvibes
4.3
0%
Dec 5AnyWhere Elementor <= 1.2.11 - Authenticated (Contributor+) Post Disclosure
CVE-2024-47361
EA
Elementor Addon Elements
WPVibes
8.8
0%
Nov 1WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerability
CVE-2024-8902
AE
Addon Elements for Elementor (formerly Elementor Addon Elements)
wpvibes
4.3
0%
Oct 12Elementor Addon Elements <= 1.13.8 - Authenticated (Contributor+) Sensitive Information Exposure via table_saved_sections
CVE-2024-47366
EA
Elementor Addon Elements
WPVibes
5.4
0%
Oct 6WordPress Elementor Addon Elements plugin <= 1.13.6 - Cross Site Scripting (XSS) vulnerability
CVE-2024-5309
FV
Form Vibes – Database Manager for Forms
wpvibes
5.4
0%
Sep 5Form Vibes – Database Manager for Forms <= 1.4.12 - Missing Authorization in Multiple Functions
CVE-2024-7122
AE
Addon Elements for Elementor (formerly Elementor Addon Elements)
wpvibes
5.4
0%
Aug 30Elementor Addon Elements <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
CVE-2024-4401
AE
Addon Elements for Elementor (formerly Elementor Addon Elements)
wpvibes
5.4
0%
Aug 30Elementor Addon Elements <= 1.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_animation Parameters
CVE-2024-5325
FV
Form Vibes
Wpvibes
6.5
0%
Jul 12The Form Vibes plugin for WordPress is vulnerable to SQL Injection via the ‘fv_export_data’ parameter in all versions up to, and including, 1.4.10 due to insufficient escaping on…
CVE-2022-3764
FV
Form Vibes
Wpvibes
7.2
1%
Jan 16The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability
CVE-2023-51410
WM
WP Mail Log
Wpvibes
8.8
1%
Dec 29Unrestricted Upload of File with Dangerous Type vulnerability in WPVibes WP Mail Log.This issue affects WP Mail Log: from n/a through 1.1.2
CVE-2023-5674
WM
WP Mail Log
Wpvibes
8.8
11%
Dec 26The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users…
CVE-2023-5673
WM
WP Mail Log
Wpvibes
8.8
1%
Dec 26The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file extensions uploading files to attach to emails, allowing attackers to upload PHP files, leading to…
CVE-2023-5672
WM
WP Mail Log
Wpvibes
6.5
1%
Dec 26The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file path parameters when attaching files to emails, leading to local file inclusion, and allowing an…
CVE-2023-5645
WM
WP Mail Log
Wpvibes
8.8
1%
Dec 26The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users…
CVE-2023-5644
WM
WP Mail Log
Wpvibes
7.6
0%
Dec 26The WP Mail Log WordPress plugin before 1.1.3 does not correctly authorize its REST API endpoints, allowing users with the Contributor role to view and delete data that should…
CVE-2023-47530
R4
Redirect 404 Error Page TO Homepage OR Custom Page With Logs
Wpvibes
7.2
1%
Dec 18Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPVibes Redirect 404 Error Page to Homepage or Custom Page with Logs allows…
CVE-2023-3088
WM
WP Mail Log
Wpvibes
6.1
0%
Jul 12The WP Mail Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 1.1.1 due to insufficient input sanitization…
CVE-2023-0443
AE
Anywhere Elementor
Wpvibes
5.3
1%
May 30The AnyWhere Elementor WordPress plugin before 1.2.8 discloses a Freemius Secret Key which could be used by an attacker to purchase the pro subscription using test credit card…
CVE-2022-45807
WM
WP Mail Log
Wpvibes
8.8
0%
Feb 2Cross-Site Request Forgery (CSRF) in WPVibes WP Mail Log plugin <= 1.0.1 versions
CVE-2021-24767
R4
Redirect 404 Error Page TO Homepage OR Custom Page With Logs
Wpvibes
6.5
1%
Nov 8The Redirect 404 Error Page to Homepage or Custom Page with Logs WordPress plugin before 1.7.9 does not check for CSRF when deleting logs, which could allow attacker to make a…