https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 13 Nov 2026 08:48:08 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-117524 <p>The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.1 does not perform a status or capability check when resolving post identifiers passed to one of its shortcodes, allowing authenticated users with at least the Contributor role to disclose the content of other users&#39; draft, private and password-protected posts. An Author can republish that content to anonymous visitors.</p> <p>The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.1 does not perform a status or capability check when resolving post identifiers passed to one of its shortcodes, allowing authenticated users with at least the Contributor role to disclose the content of other users&#39; draft, private and password-protected posts. An Author can republish that content to anonymous visitors.</p> https://db.gcve.eu/vuln/fkie_cve-2026-117524 https://db.gcve.eu/vuln/ghsa-vv63-8qc6-4h36 <p>The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.1 does not perform a status or capability check when resolving post identifiers passed to one of its shortcodes, allowing authenticated users with at least the Contributor role to disclose the content of other users&#39; draft, private and password-protected posts. An Author can republish that content to anonymous visitors.</p> <p>The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.1 does not perform a status or capability check when resolving post identifiers passed to one of its shortcodes, allowing authenticated users with at least the Contributor role to disclose the content of other users&#39; draft, private and password-protected posts. An Author can republish that content to anonymous visitors.</p> https://db.gcve.eu/vuln/ghsa-vv63-8qc6-4h36