Add-ons.org vulnerabilities

Products

• Pdf For Wpforms 5
• Pdf For Elementor Forms + Drag And Drop Template Builder 4
• Drag And Drop File Upload For Elementor Forms 3
• Pdf Invoice Builder For Woocommerce 3
• Pdf For Contact Form 7 2

Newest

• add-ons.org pdf for contact form 7 WordPress PDF for Contact Form 7 plugin <= 7.1.0 - Arbitrary File Download vulnerability CVE-2026-94664 7.5 HighOctober 9, 2026
• add-ons.org drag and drop file upload for elementor forms Drag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' Parameter CVE-2026-18351 Public exploit 9.8 CriticalSeptember 10, 2026
• add-ons.org pdf for elementor forms + drag and drop template builder WordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 5.5.1 - Broken Access Control vulnerability CVE-2026-45443 5.0 MediumMay 20, 2026
• add-ons.org product file upload for woocommerce WordPress Product File Upload for WooCommerce plugin <= 2.2.4 - Arbitrary File Deletion vulnerability CVE-2026-25328 6.8 MediumMarch 25, 2026
• add-ons.org pdf for elementor forms + drag and drop template builder WordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 6.3.1 - Broken Access Control vulnerability CVE-2026-22350 6.5 MediumFebruary 20, 2026
• add-ons.org pdf for wpforms WordPress PDF for WPForms plugin <= 6.3.0 - Broken Access Control vulnerability CVE-2025-68534 6.5 MediumFebruary 20, 2026
• add-ons.org pdf for elementor forms + drag and drop template builder WordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 6.5.0 - PHP Object Injection vulnerability CVE-2025-60084 8.8 HighDecember 18, 2025
• add-ons.org pdf invoice builder for woocommerce WordPress PDF Invoice Builder for WooCommerce plugin <= 6.5.0 - Deserialization of untrusted data vulnerability CVE-2025-60083 8.8 HighDecember 18, 2025
• add-ons.org pdf for wpforms WordPress PDF for WPForms plugin <= 6.5.0 - Deserialization of untrusted data vulnerability CVE-2025-60082 8.8 HighDecember 18, 2025
• add-ons.org pdf for contact form 7 WordPress PDF for Contact Form 7 plugin <= 6.5.0 - Deserialization of untrusted data vulnerability CVE-2025-60081 8.8 HighDecember 18, 2025
• add-ons.org pdf for gravity forms + drag and drop template builder WordPress PDF for Gravity Forms + Drag And Drop Template Builder plugin <= 6.5.0 - PHP Object Injection vulnerability CVE-2025-60080 7.5 HighDecember 18, 2025
• add-ons.org pdf for wpforms WordPress PDF for WPForms Plugin <= 6.2.1 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58620 6.5 MediumSeptember 3, 2025
• add-ons.org drag and drop file upload for elementor forms WordPress Drag and Drop File Upload for Elementor Forms Plugin <= 1.5.3 - Arbitrary File Upload Vulnerability CVE-2025-49387 10.0 CriticalAugust 28, 2025
• add-ons.org pdf for elementor forms + drag and drop template builder WordPress PDF for Elementor Forms + Drag And Drop Template Builder Plugin <= 6.2.0 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58208 6.5 MediumAugust 27, 2025
• add-ons.org pdf for wpforms WordPress PDF for WPForms plugin <= 5.5.0 - Broken Access Control Vulnerability CVE-2025-49289 5.0 MediumJune 6, 2025
• add-ons.org drag and drop file upload for elementor forms WordPress Drag and Drop File Upload for Elementor Forms plugin <= 1.4.3 - Arbitrary File Deletion Vulnerability CVE-2025-47492 8.6 HighMay 23, 2025
• add-ons.org pdf invoice builder for woocommerce WordPress PDF Invoice Builder for WooCommerce plugin <= 5.3.8 - SQL Injection Vulnerability CVE-2025-47537 7.6 HighMay 7, 2025
• add-ons.org cost calculator for elementor WordPress Cost Calculator for Elementor plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability CVE-2025-47476 6.5 MediumMay 7, 2025
• add-ons.org pdf for wpforms WordPress PDF for WPForms plugin <= 5.3.0 - Arbitrary Shortcode Execution vulnerability CVE-2025-30767 5.4 MediumMarch 27, 2025
• add-ons.org pdf invoice builder for woocommerce WordPress PDF Invoice Builder for WooCommerce plugin <= 4.6.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-24755 6.5 MediumJanuary 24, 2025
• add-ons.org email templates customizer for wordpress – drag and drop email templates builder – yeemail WordPress Email Templates Customizer YeeMail plugin <= 2.1.4 - Cross Site Scripting (XSS) vulnerability CVE-2025-22802 6.5 MediumJanuary 9, 2025