Addonsorg vulnerabilities
Newest
- addonsorg pdf invoice for woocommerce + drag and drop template builder PDF Invoice for WooCommerce + Drag and Drop Template Builder <= 7.1.1 - Unauthenticated PHP Object Injection to Remote Code Execution via 'customer_note' Checkout Field 9.8 Critical
- addonsorg repeater fields for elementor forms Repeater Fields for Elementor Forms <= 2.2.7 - Unauthenticated Stored Cross-Site Scripting via Repeater Field Value 7.2 High
- add-ons.org drag and drop file upload for elementor forms Drag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' Parameter 9.8 Critical
- addonsorg repeater fields for gravity forms Repeater Fields for Gravity Forms <= 3.0.4 - Unauthenticated Stored Cross-Site Scripting via Repeated Multi-Input Sub-Field Values 7.2 High
- addonsorg drag and drop file upload for contact form 7 Drag and Drop File Upload for Contact Form 7 <= 1.1.3 - Unauthenticated Arbitrary File Upload via sanitize_file_name Bypass 8.1 High
- addonsorg pdf for contact form 7 + drag and drop template builder PDF for Contact Form 7 + Drag and Drop Template Builder <= 6.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Duplication 4.3 Medium
- addonsorg pdf for wpforms + drag and drop template builder PDF for WPForms + Drag and Drop Template Builder <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via yeepdf_dotab Shortcode 6.4 Medium