Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 13 Nov 2026 09:38:35 +0000 CVE-2026-117524 — Dynific Addons for Elementor 1.3 - Contributor+ Arbitrary Post Content Disclosure via dynific_template Shortcode https://db.gcve.eu/vuln/cve-2026-117524 <p><strong>Affected:</strong> Unknown Dynific Addons for Elementor (formerly Anywhere Elementor)</p> <p>The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.1 does not perform a status or capability check when resolving post identifiers passed to one of its shortcodes, allowing authenticated users with at least the Contributor role to disclose the content of other users&#39; draft, private and password-protected posts. An Author can republish that content to anonymous visitors.</p> <p><strong>Affected:</strong> Unknown Dynific Addons for Elementor (formerly Anywhere Elementor)</p> <p>The Dynific Addons for Elementor (formerly Anywhere Elementor) WordPress plugin before 1.3.1 does not perform a status or capability check when resolving post identifiers passed to one of its shortcodes, allowing authenticated users with at least the Contributor role to disclose the content of other users&#39; draft, private and password-protected posts. An Author can republish that content to anonymous visitors.</p> https://db.gcve.eu/vuln/cve-2026-117524