Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-58208 EUVD-2025-25924GHSA-gr9q-xv7p-whc6

WordPress PDF for Elementor Forms + Drag And Drop Template Builder Plugin <= 6.2.0 - Cross Site Scripting (XSS) Vulnerability

Published Aug 27, 2025 · Updated May 12, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms allows Stored XSS.This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through <= 6.2.0.

Affected products

VendorProductAffectedFixed
add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder ≤ 6.2.0 —

References