Wpvibes vulnerabilities
We track 5 vulnerabilities in Wpvibes products across 5 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on November 8, 2026.
Latest Wpvibes vulnerabilities
- 8.5 High severity
AnyWhere Elementor: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Blind SQL Injection.This issue affects AnyWhere Elementor: from n/a through 1.3.0.
- 7.2 High severity
Form Vibes – Save Contact Form 7 & Elementor…: Improper Neutralization of Input During Web Page Generation
The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form 7 Form Field in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it po
- 7.1 High severity
WP Mail Log: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in WPVibes WP Mail Log allows DOM-Based XSS. This issue affects WP Mail Log: from n/a through 1.0.2.
- 8.8 High severity
Elementor Addon Elements: Missing Authorization
Missing Authorization vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder.This issue affects Elementor Addon Elements: from n/a through <= 1.13.6.
- 7.2 High severity
Redirect 404 Error Page to Homepage or Custom…: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPVibes Redirect 404 Error Page to Homepage or Custom Page with Logs allows SQL Injection.This issue affects Redirect 404 Error Page to Homepage or Custom Pag