Skip to content
OpenAdvisories

Vendor

add-ons.org

27 known vulnerabilities.

Products

PDF for WPForms 5 PDF for Elementor Forms + Drag And Drop Template Builder 4 Drag and Drop File Upload for Elementor Forms 3 PDF Invoice Builder for WooCommerce 3 PDF for Contact Form 7 2 Drag and Drop File Upload for Contact Form 7 1 Product File Upload for WooCommerce 1 PDF for Contact Form 7 + Drag and Drop Template Builder 1 Repeater Fields for Gravity Forms 1 PDF for Gravity Forms + Drag And Drop Template Builder 1 Email Templates Customizer for WordPress – Drag And Drop Email Templates Builder – YeeMail 1 Cost Calculator for Elementor 1 Repeater Fields for Elementor Forms 1 PDF for WPForms + Drag and Drop Template Builder 1 PDF Invoice for WooCommerce + Drag and Drop Template Builder 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-18351 Public exploit

    Drag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' Parameter

    The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via the elementor_file_upload function. This is due to insufficient file type validation in the is_file_t…

    add-ons.org Drag and Drop File Upload for Elementor Forms Web / CMS