Critical · 9.6 CVE-2026-28192 EUVD-2026-60891GHSA-f29r-mh79-f49q

WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.67 - Arbitrary File Upload vulnerability

Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack

Vendor: Piotnet Product: Piotnet Addons For Elementor Pro

Description

Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro <= 7.1.67 versions.

Affected products

Vendor	Product	Affected	Fixed
Piotnet	Piotnet Addons For Elementor Pro	≤ 7.1.67	—

References

https://patchstack.com/database/wordpress/plugin/piotnet-addons-for-elementor-pro/vulnerability/wordpress-piotnet-addons-for-elementor-pro-plugin-7-1-67-arbitrary-file-upload-vulnerability?_s_id=cve vdb-entry