The AnyWhere Elementor plugin for WordPress is not secure in versions up to 1.2.7. This means that someone could see a secret code in the plugin repo which allowed them to buy Freemius Pro using fake credit card numbers. This secret code has been cancelled