Vendor

    WPVibes

    50 known vulnerabilities in products by WPVibes, 0 of them actively exploited (CISA KEV).

    Key figures

    50

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in WPVibes
    HighCVE-2023-5674

    WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs/send_mail endpoint

    		8.8
    HighCVE-2024-1358

    Elementor Addon Elements <= 1.12.12 - Directory Traversal to Local File Inclusion

    also in 1 other product

    		8.8
    HighCVE-2023-5673

    WP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCE

    		8.8
    CriticalCVE-2023-51410

    WordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to Arbitrary File Upload

    		9.9
    HighCVE-2023-5645

    WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs endpoint

    		8.8
    HighCVE-2022-3764

    Form Vibes < 1.4.5 - Admin+ SQLi

    		7.2
    HighCVE-2026-13378

    Form Vibes <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting via Contact Form 7 Form Field

    		7.2
    HighCVE-2023-47530

    WPVibes Redirect 404 Error Page to Homepage or Custom Page with Logs: SQL Injection

    		7.6
    MediumCVE-2026-114183

    WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerability

    		6.5
    HighCVE-2024-5325

    Form Vibes <= 1.4.10 - Authenticated (Subscriber+) SQL Injection via fv_export_data

    		8.8
    MediumCVE-2026-114185

    WordPress AnyWhere Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-114184

    WordPress Elementor Addon Elements plugin <= 1.14.4 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2023-5672

    WP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpoint

    		6.5
    MediumCVE-2023-4723

    Elementor Addon Elements <= 1.12.7 - Missing Authorization to Sensitive Information Exposure

    also in 1 other product

    		5.3
    HighCVE-2026-61947

    WPVibes Form Vibes: Cross-site Scripting

    		7.1
    MediumCVE-2026-114187

    WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability

    		5.3
    HighCVE-2023-33999

    WordPress WP Mail Log plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2023-5644

    WP Mail Log < 1.1.3 – Incorrect Authorization in REST API Endpoints

    		7.6
    MediumCVE-2024-3743

    Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

    also in 1 other product

    		6.4
    HighCVE-2023-3088

    WP Mail Log <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting via Email

    		7.2
    MediumCVE-2024-1392

    Addon Elements for Elementor (formerly Elementor Addon Elements): Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-1393

    Addon Elements for Elementor (formerly Elementor Addon Elements): Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-1391

    Addon Elements for Elementor (formerly Elementor Addon Elements): Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-1422

    Addon Elements for Elementor (formerly Elementor Addon Elements): Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-2792

    Addon Elements for Elementor (formerly Elementor Addon Elements): Cross-site Scripting

    also in 1 other product

    		6.4

    All vulnerabilities in search

    Products

    Products by WPVibes
    Addon Elements For Elementor (formerly Elementor Addon Elements)210
    WP Mail Log120
    Elementor Addon Elements60
    Form Vibes – Database Manager For Forms50
    Anywhere Elementor40
    Form Vibes30
    WPVibes Redirect 404 Error Page to Homepage or Custom Page with Logs30