Skip to content
OpenAdvisories

Vendor

addonsorg

7 known vulnerabilities.

Products

Drag and Drop File Upload for Contact Form 7 1 Drag and Drop File Upload for Elementor Forms 1 PDF for Contact Form 7 + Drag and Drop Template Builder 1 Repeater Fields for Gravity Forms 1 Repeater Fields for Elementor Forms 1 PDF for WPForms + Drag and Drop Template Builder 1 PDF Invoice for WooCommerce + Drag and Drop Template Builder 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2026-94573

    Repeater Fields for Elementor Forms <= 2.2.7 - Unauthenticated Stored Cross-Site Scripting via Repeater Field Value

    The Repeater Fields for Elementor Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeater Field Value in all versions up to, and including, 2.2.7 due to insufficient input sanitization and output escaping. This makes it possible f…

    addonsorg Repeater Fields for Elementor Forms Web / CMS
  • High 7.2
    CVE-2026-84293

    Repeater Fields for Gravity Forms <= 3.0.4 - Unauthenticated Stored Cross-Site Scripting via Repeated Multi-Input Sub-Field Values

    The Repeater Fields for Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeated Multi-Input Sub-Field Values in all versions up to, and including, 3.0.4 due to insufficient input sanitization and output escaping. This make…

    addonsorg Repeater Fields for Gravity Forms Web / CMS
  • High 8.1
    CVE-2026-5364

    Drag and Drop File Upload for Contact Form 7 <= 1.1.3 - Unauthenticated Arbitrary File Upload via sanitize_file_name Bypass

    The Drag and Drop File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file upload in versions up to, and including, 1.1.3. This is due to the plugin extracting the file extension before sanitization occurs and allowing the file type…

    addonsorg Drag and Drop File Upload for Contact Form 7 Web / CMS