Advisories · Technology

addonsorg Drag and Drop File Upload for Elementor Forms.

Every CVE that names addonsorg Drag and Drop File Upload for Elementor Forms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-18351 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Drag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' Parameter
- addonsorg Drag and Drop File Upload for Elementor Forms
- Unrestricted file upload
Not analysed yet 10 Sept 2026