Addonsorg
6 CVEs across 6 Addonsorg products. Browse Addonsorg vulnerabilities, severities, and proof-of-concept exploits.
Addonsorg products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-94573 | High | 7.2 | 2026-09-25 | The Repeater Fields for Elementor Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeater Field Value in all versions up to, and i… |
CVE-2026-18351 | Critical | 9.8 | 2026-09-10 | The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via t… |
CVE-2026-84293 | High | 7.2 | 2026-09-09 | The Repeater Fields for Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeated Multi-Input Sub-Field Values in all versio… |
CVE-2026-5364 | High | 8.1 | 2026-04-24 | The Drag and Drop File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file upload in versions up to, and including, 1.1.3. This is d… |
CVE-2025-14074 | Medium | 4.3 | 2025-12-12 | The PDF for Contact Form 7 + Drag and Drop Template Builder plugin for WordPress is vulnerable to unauthorized post duplication due to a missing capability che… |
CVE-2024-12593 | Medium | 6.4 | 2025-01-15 | The PDF for WPForms + Drag and Drop Template Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's yeepdf_dotab shortcode… |