A SQL Injection vulnerability exists in WPVibes AnyWhere Elementor plugin versions up to 1.3.0. This vulnerability allows an attacker with low privileges to perform blind SQL injection attacks, potentially leading to high confidentiality impact and limited availability impact. The vulnerability is identified as CVE-2026-114189 with a high severity score of 8.5.