Skip to content
OpenAdvisories

Vendor

add-ons.org

27 known vulnerabilities.

Products

PDF for WPForms 5 PDF for Elementor Forms + Drag And Drop Template Builder 4 Drag and Drop File Upload for Elementor Forms 3 PDF Invoice Builder for WooCommerce 3 PDF for Contact Form 7 2 Drag and Drop File Upload for Contact Form 7 1 Product File Upload for WooCommerce 1 PDF for Contact Form 7 + Drag and Drop Template Builder 1 Repeater Fields for Gravity Forms 1 PDF for Gravity Forms + Drag And Drop Template Builder 1 Email Templates Customizer for WordPress – Drag And Drop Email Templates Builder – YeeMail 1 Cost Calculator for Elementor 1 Repeater Fields for Elementor Forms 1 PDF for WPForms + Drag and Drop Template Builder 1 PDF Invoice for WooCommerce + Drag and Drop Template Builder 1
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Medium 5.0
    CVE-2026-45443

    WordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 5.5.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ADD-ONS.ORG PDF for Elementor Forms + Drag And Drop Template Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: f…

    add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder
  • Medium 6.8
    CVE-2026-25328

    WordPress Product File Upload for WooCommerce plugin <= 2.2.4 - Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in add-ons.org Product File Upload for WooCommerce products-file-upload-for-woocommerce allows Path Traversal.This issue affects Product File Upload for WooCommerce: …

    add-ons.org Product File Upload for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2026-22350

    WordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 6.3.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF for Elementor Forms + Drag And D…

    add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder
  • Medium 6.5
    CVE-2025-68534

    WordPress PDF for WPForms plugin <= 6.3.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF for WPForms: from n/a through <= 6.3.0.

    add-ons.org PDF for WPForms
  • Medium 4.3
    CVE-2025-14074

    PDF for Contact Form 7 + Drag and Drop Template Builder <= 6.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Duplication

    The PDF for Contact Form 7 + Drag and Drop Template Builder plugin for WordPress is vulnerable to unauthorized post duplication due to a missing capability check on the 'rednumber_duplicate' function in all versions up to, and including, 6.3.3. This makes it …

    add-ons.org PDF for Contact Form 7 + Drag and Drop Template Builder Web / CMS
  • Medium 6.5
    CVE-2025-58620

    WordPress PDF for WPForms Plugin <= 6.2.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Stored XSS.This issue affects PDF for WPForms: from n/a through <= 6.2.1.

    add-ons.org PDF for WPForms
  • Medium 6.5
    CVE-2025-58208

    WordPress PDF for Elementor Forms + Drag And Drop Template Builder Plugin <= 6.2.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms allows Stored XSS.This issue affects PDF for Elementor Forms + D…

    add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder
  • Medium 5.0
    CVE-2025-49289

    WordPress PDF for WPForms plugin <= 5.5.0 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF for WPForms: from n/a through <= 5.5.0.

    add-ons.org PDF for WPForms
  • Medium 6.5
    CVE-2025-47476

    WordPress Cost Calculator for Elementor plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in add-ons.org Cost Calculator for Elementor cost-calculator-for-elementor allows DOM-Based XSS.This issue affects Cost Calculator for Elementor: from n/a throu…

    add-ons.org Cost Calculator for Elementor
  • Medium 5.4
    CVE-2025-30767

    WordPress PDF for WPForms plugin <= 5.3.0 - Arbitrary Shortcode Execution vulnerability

    Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF for WPForms: from n/a through <= 5.3.0.

    add-ons.org PDF for WPForms
  • Medium 6.5
    CVE-2025-24755

    WordPress PDF Invoice Builder for WooCommerce plugin <= 4.6.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce allows Stored XSS.This issue affects PDF Invoice Builder for WooCommerce: from n/a throug…

    add-ons.org PDF Invoice Builder for WooCommerce Web / CMS
  • Medium 6.4
    CVE-2024-12593

    PDF for WPForms + Drag and Drop Template Builder <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via yeepdf_dotab Shortcode

    The PDF for WPForms + Drag and Drop Template Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's yeepdf_dotab shortcode in all versions up to, and including, 4.6.0 due to insufficient input sanitization and output escapi…

    add-ons.org PDF for WPForms + Drag and Drop Template Builder Web / CMS
  • Medium 6.5
    CVE-2025-22802

    WordPress Email Templates Customizer YeeMail plugin <= 2.1.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in add-ons.org Email Templates Customizer for WordPress – Drag And Drop Email Templates Builder – YeeMail yeemail allows Stored XSS.This issue affects Email Tem…

    add-ons.org Email Templates Customizer for WordPress – Drag And Drop Email Templates Builder – YeeMail Web / CMS