Skip to content
OpenAdvisories

Vendor

add-ons.org

28 known vulnerabilities.

Products

PDF for WPForms 5 Drag and Drop File Upload for Elementor Forms 4 PDF for Elementor Forms + Drag And Drop Template Builder 4 PDF Invoice Builder for WooCommerce 3 PDF for Contact Form 7 2 Drag and Drop File Upload for Contact Form 7 1 Product File Upload for WooCommerce 1 PDF for Contact Form 7 + Drag and Drop Template Builder 1 Repeater Fields for Gravity Forms 1 PDF for Gravity Forms + Drag And Drop Template Builder 1 Email Templates Customizer for WordPress – Drag And Drop Email Templates Builder – YeeMail 1 Cost Calculator for Elementor 1 Repeater Fields for Elementor Forms 1 PDF for WPForms + Drag and Drop Template Builder 1 PDF Invoice for WooCommerce + Drag and Drop Template Builder 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-109220

    PDF Invoice for WooCommerce + Drag and Drop Template Builder <= 7.1.1 - Unauthenticated PHP Object Injection to Remote Code Execution via 'customer_note' Checkout Field

    The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.1.1 via the 'customer_note' parameter parameter. This is due to insufficient sanitization of th…

    add-ons.org PDF Invoice for WooCommerce + Drag and Drop Template Builder Web / CMS
  • Critical 9.8
    CVE-2026-18351 Public exploit

    Drag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' Parameter

    The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via the elementor_file_upload function. This is due to insufficient file type validation in the is_file_t…

    add-ons.org Drag and Drop File Upload for Elementor Forms Web / CMS
  • Critical 10.0
    CVE-2025-49387 Scanner template

    WordPress Drag and Drop File Upload for Elementor Forms Plugin <= 1.5.3 - Arbitrary File Upload Vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in add-ons.org Drag and Drop File Upload for Elementor Forms drag-and-drop-file-upload-for-elementor-forms allows Upload a Web Shell to a Web Server.This issue affects Drag and Drop File Upload for…

    add-ons.org Drag and Drop File Upload for Elementor Forms