add-ons.org vulnerabilities

CVEs per yearBy the year they were published

1. 202515
2. 20265

Newest CVEs

• CVE-2026-94664

  WordPress PDF for Contact Form 7 plugin <= 7.1.0 - Arbitrary File Download vulnerability

  add-ons.org · PDF for Contact Form 7

  High7.5
• CVE-2026-45443

  WordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 5.5.1 - Broken Access Control vulnerability

  ADD-ONS.ORG · PDF for Elementor Forms + Drag And Drop Template Builder

  Medium5.0
• CVE-2026-25328

  WordPress Product File Upload for WooCommerce plugin <= 2.2.4 - Arbitrary File Deletion vulnerability

  add-ons.org · Product File Upload for WooCommerce

  Medium6.8
• CVE-2026-22350

  WordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 6.3.1 - Broken Access Control vulnerability

  add-ons.org · PDF for Elementor Forms + Drag And Drop Template Builder

  Medium6.5
• CVE-2025-68534

  WordPress PDF for WPForms plugin <= 6.3.0 - Broken Access Control vulnerability

  add-ons.org · PDF for WPForms

  Medium6.5
• CVE-2025-60084

  WordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 6.5.0 - PHP Object Injection vulnerability

  add-ons.org · PDF for Elementor Forms + Drag And Drop Template Builder

  High8.8
• CVE-2025-60083

  WordPress PDF Invoice Builder for WooCommerce plugin <= 6.5.0 - Deserialization of untrusted data vulnerability

  add-ons.org · PDF Invoice Builder for WooCommerce

  High8.8
• CVE-2025-60082

  WordPress PDF for WPForms plugin <= 6.5.0 - Deserialization of untrusted data vulnerability

  add-ons.org · PDF for WPForms

  High8.8
• CVE-2025-60081

  WordPress PDF for Contact Form 7 plugin <= 6.5.0 - Deserialization of untrusted data vulnerability

  add-ons.org · PDF for Contact Form 7

  High8.8
• CVE-2025-60080

  WordPress PDF for Gravity Forms + Drag And Drop Template Builder plugin <= 6.5.0 - PHP Object Injection vulnerability

  add-ons.org · PDF for Gravity Forms + Drag And Drop Template Builder

  High7.5