Drag and Drop File Upload for Elementor Forms vulnerabilities

2 known vulnerabilities in Drag and Drop File Upload for Elementor Forms from Add-ons.org. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  Drag and Drop File Upload for Elementor Forms: Unrestricted Upload of File with Dangerous Type

  CVE-2025-49387Aug 28, 2025Add-ons.orgEPSS 1.48%

  Unrestricted Upload of File with Dangerous Type vulnerability in add-ons.org Drag and Drop File Upload for Elementor Forms drag-and-drop-file-upload-for-elementor-forms allows Upload a Web Shell to a Web Server.This issue affects Drag and Drop File Upload for

• 8.6 High severity

  Drag and Drop File Upload for Elementor Forms: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-47492May 23, 2025Add-ons.orgEPSS 1.48%

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in add-ons.org Drag and Drop File Upload for Elementor Forms drag-and-drop-file-upload-for-elementor-forms allows Path Traversal.This issue affects Drag and Drop File