{
 "id": "WPSEC-2026-2199",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2199/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2199/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2199/index.md",
 "title": "AnyWhere Elementor <= 1.3.0 - Unauthenticated Sensitive Information Exposure via AJAX Lookup and Pagination Handlers",
 "description": "The Dynific Addons for Elementor (formerly Anywhere Elementor) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.0 due to missing capability checks on the ae_term_data, ae_post_data and ae_repeater_data AJAX actions, which were registered for logged-out users and protected at most by a publicly printed nonce. The 'paged' fetch mode also rendered any widget from any caller-supplied post ID without checking the post's visibility. This makes it possible for unauthenticated attackers to retrieve terms from non-public taxonomies, titles of draft and private posts, ACF field values, and widget output from private or draft documents.",
 "plugin": {
  "slug": "anywhere-elementor",
  "name": "AnyWhere Elementor",
  "full_name": "Dynific Addons for Elementor (formerly Anywhere Elementor)",
  "wordpress_org": "https://wordpress.org/plugins/anywhere-elementor/",
  "advisories_url": "https://wpsec.com/vuln/plugin/anywhere-elementor/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/anywhere-elementor"
 },
 "type": "SENSITIVE DATA DISCLOSURE",
 "cwe": [
  "CWE-862"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "1.3.1",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 1.3.1"
  ]
 },
 "introduced_in": null,
 "fixed_in": "1.3.1",
 "remediation": "Update to 1.3.1 or later.",
 "fix_released": "2026-11-02T07:35:45+00:00",
 "published": "2026-11-03T14:48:33+00:00",
 "updated": "2026-11-03T13:19:40.008904+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2199/",
  "https://plugins.svn.wordpress.org/anywhere-elementor/tags/1.3.1/",
  "https://wordpress.org/plugins/anywhere-elementor/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/anywhere-elementor",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-11-03"
 }
}