Description
Unrestricted Upload of File with Dangerous Type vulnerability in add-ons.org Drag and Drop File Upload for Elementor Forms drag-and-drop-file-upload-for-elementor-forms allows Upload a Web Shell to a Web Server.This issue affects Drag and Drop File Upload for Elementor Forms: from n/a through <= 1.5.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| add-ons.org | Drag and Drop File Upload for Elementor Forms | ≤ 1.5.3 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- WordPress Drag and Drop File Upload for Elementor Forms <=1.5.3 - Unauthenticated Arbitrary File Upload http/cves/2025/CVE-2025-49387.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.