Medium severity5.3NVD Advisory· Published May 30, 2023· Updated Jun 17, 2026

CVE-2023-0443

Description

The AnyWhere Elementor WordPress plugin before 1.2.8 discloses a Freemius Secret Key which could be used by an attacker to purchase the pro subscription using test credit card numbers without actually paying the amount. Such key has been revoked.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Anywhere Elementorinferred2 versions
<1.2.8+ 1 more
- (no CPE)range: <1.2.8
- (no CPE)range: <1.2.8
Package: https://wordpress.org/plugins/anywhere-elementor

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/471f3226-8f90-43d1-b826-f11ef4bbd602nvdExploit

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000