The AnyWhere Elementor WordPress plugin before 1.2.8 discloses a Freemius Secret Key which could be used by an attacker to purchase the pro subscription using test credit card numbers without actually paying the amount. Such key has been revoked.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Anywhere_elementor | Wpvibes | * | 1.2.8 (excluding) |