addonsorg vulnerabilities
7 published CVEs name addonsorg among the affected products.
- 7Published CVEs7 of them scored
- 6Last 12 monthspublished in the last year
- 2Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-109220
PDF Invoice for WooCommerce + Drag and Drop Template Builder <= 7.1.1 - Unauthenticated PHP Object Injection to Remote Code Execution via 'customer_note' Checkout Field
addonsorg · PDF Invoice for WooCommerce + Drag and Drop Template Builder
Critical9.8 - CVE-2026-94573
Repeater Fields for Elementor Forms <= 2.2.7 - Unauthenticated Stored Cross-Site Scripting via Repeater Field Value
addonsorg · Repeater Fields for Elementor Forms
High7.2 - CVE-2026-18351
Drag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' Parameter
addonsorg · Drag and Drop File Upload for Elementor Forms
Critical9.8 - CVE-2026-84293
Repeater Fields for Gravity Forms <= 3.0.4 - Unauthenticated Stored Cross-Site Scripting via Repeated Multi-Input Sub-Field Values
addonsorg · Repeater Fields for Gravity Forms
High7.2 - CVE-2026-5364
Drag and Drop File Upload for Contact Form 7 <= 1.1.3 - Unauthenticated Arbitrary File Upload via sanitize_file_name Bypass
addonsorg · Drag and Drop File Upload for Contact Form 7
High8.1 - CVE-2025-14074
PDF for Contact Form 7 + Drag and Drop Template Builder <= 6.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Duplication
addonsorg · PDF for Contact Form 7 + Drag and Drop Template Builder
Medium4.3 - CVE-2024-12593
PDF for WPForms + Drag and Drop Template Builder <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via yeepdf_dotab Shortcode
addonsorg · PDF for WPForms + Drag and Drop Template Builder
Medium6.4