# CVE-2026-117524: Dynific Addons for Elementor information disclosure via shortcode

Source: https://junglewise.ai/threats/cve-2026-117524-the-dynific-addons-for-elementor-formerly-anywhere-elementor  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-11. Updated: 2026-11-11  
License: CC BY 4.0 with a link back

CVE-2026-117524 · Severity: info · Published 2026-11-11

Dynific Addons for Elementor is a WordPress plugin that extends Elementor page builder functionality. The plugin fails to verify user permissions when processing shortcodes, allowing contributors and authors to view and republish other users' draft, private, and password-protected posts to the public.

Technologies: [Dynific Addons for Elementor](https://junglewise.ai/threats/technologies/dynific-addons-for-elementor). Vendors: [Dynific](https://junglewise.ai/threats/vendors/dynific).

## Quick answers

**Is CVE-2026-117524 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-117524 being exploited in the wild.

**How severe is CVE-2026-117524?** Informational severity, published 11 November 2026.

**Which products and versions are affected?** Dynific Addons for Elementor before 1.3.1.

**Is there a fix for CVE-2026-117524?** Yes: fixed in 1.3.1. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-117524 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-117524?** Check whether you run Dynific Addons for Elementor at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 1.3.1

## Technical details

The plugin does not perform capability or status checks when resolving post identifiers in the dynific_template shortcode, enabling authenticated users with Contributor role (or higher) to access arbitrary post content regardless of post status. An Author can then republish disclosed content to anonymous visitors. This is an access control bypass requiring user authentication but no special privileges.

## Affected products

- Dynific Addons for Elementor before 1.3.1

## Timeline

- 2026-11-09: disclosed
- 2026-11-11: advisory

## References

- [https://wpscan.com/vulnerability/dc064f7f-4be6-4602-a0b2-99c15f8b8fc5/](https://wpscan.com/vulnerability/dc064f7f-4be6-4602-a0b2-99c15f8b8fc5/)

## Related threats

- [Dynific Addons for Elementor privilege escalation in AJAX module settings](https://junglewise.ai/threats/cve-2026-117523-the-dynific-addons-for-elementor-formerly-anywhere-elementor)
- [Dynific Addons for Elementor stored XSS in post title via widget](https://junglewise.ai/threats/cve-2026-117522-the-dynific-addons-for-elementor-formerly-anywhere-elementor)
- [Dynific Addons for Elementor unescaped profile value in Post Author widget](https://junglewise.ai/threats/cve-2026-117521-the-dynific-addons-for-elementor-formerly-anywhere-elementor)
- [Dynific Addons for Elementor SQL injection in preview handler](https://junglewise.ai/threats/cve-2026-103914-the-dynific-addons-for-elementor-plugin-for-wordpress-is)
- [Dynific Addons for Elementor arbitrary shortcode execution](https://junglewise.ai/threats/cve-2026-102564-the-the-dynific-addons-for-elementor-formerly-anywhere-elementor)