Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-102564— Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3.0 - Unauthenticated Arbitrary Shortcode Execution via Comment Content via do_shortcode() over rendered template buffer

Quick assessment

Affected
wpvibes Dynific Addons for Elementor (formerly Anywhere Elementor)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

WordPress 插件"Dynific Addons for Elementor"（前身为 Anywhere Elementor）在所有 1.3.0 及更早版本中存在任意短代码执行漏洞。该漏洞源于软件在执行 函数前，未能对传入值进行适当验证，从而允许用户触发该动作。这使得未认证的攻击者能够执行任意短代码。 利用该漏洞需要满足以下条件：目标站点必须存在一篇通过 AE 模板渲染的公开文章，且该模板中包含了"AE Post Comments"组件，同时攻击者的评论需在该页面上可见。一旦攻击者拥有一条评论已获批准，或站点

CVSS 6.5 · Medium

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-102564

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3.0 - Unauthenticated Arbitrary Shortcode Execution via Comment Content via do_shortcode() over rendered template buffer
Source: CVE Program / CVE List V5
Vulnerability Description
The The Dynific Addons for Elementor (formerly Anywhere Elementor) plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.3.0 This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. Exploitation requires the target site to have a public post rendered through an AE template that includes the AE Post Comments widget, and for the attacker's comment to be visible on that page — a barrier removed once the attacker has a previously approved comment or when comment moderation is relaxed.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
wpvibes Dynific Addons for Elementor (formerly Anywhere Elementor) 0 ~ 1.3.0 -

II. Public POCs for CVE-2026-102564

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-102564

请登录查看更多情报信息。

Other References for CVE-2026-102564 (5)

Same Patch Batch · wpvibes · 2026-11-07 · 4 CVEs total

CVE-2026-103914 6.5 MEDIUM Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3 - Authenticated (Subscri
CVE-2026-119467 5.4 MEDIUM WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability
CVE-2026-119465 5.3 MEDIUM WordPress Elementor Addon Elements plugin <= 1.15 - Sensitive Data Exposure vulnerability

IV. Related Vulnerabilities

Same product: Dynific Addons for Elementor (formerly Anywhere Elementor)
Same vendor: wpvibes
Same weakness: CWE-94