VulnCheck KEV: CVE-2026-4885

The Piotnet Addons for Elementor Pro plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'pafeajaxformbuilder' function in all versions up to, and including, 7.1.70. The plugin uses an incomplete extension blacklist that only blocks php, phpt,...

CVE-2026-28192: Unrestricted Upload of File with Dangerous Type

Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro = 7.1.67 versions...

CVE-2026-4885: Unrestricted Upload of File with Dangerous Type

The Piotnet Addons for Elementor Pro plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'pafeajaxformbuilder' function in all versions up to, and including, 7.1.70. The plugin uses an incomplete extension blacklist that only blocks php, phpt,...

CVE-2024-33635 WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Unauthenticated Arbitrary Post/Page Deletion vulnerability

Missing Authorization vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17...

CVE-2024-33632

Technical details on CVE-2024-33632 (Piotnet Addons For Elementor Pro CSRF) are not present in the connected documents. Public info in the Initial Description is limited to the affected product/version; monitor for updates.

CVE-2024-33631

A Stored Cross-Site Scripting (XSS) vulnerability exists in Piotnet Addons For Elementor Pro (affected versions from n/a through 7.1.17 ) due to the improper neutralization of input during web page generation. This flaw allows an attacker to inject malicious scripts into the application. No speci...

PT-2024-25395

Name of the Vulnerable Software and Affected Versions Piotnet Addons For Elementor Pro versions 7.1.17 and earlier Description The issue is related to a Missing Authorization vulnerability in Piotnet Addons For Elementor Pro. This vulnerability allows unauthorized access. Recommendations For...

CVE-2024-33631: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Piotnet Piotnet Addons For Elementor Pro allows Stored XSS.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17...

CVE-2024-33635: Missing Authorization

Missing Authorization vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17...

CVE-2024-33632: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17...

PT-2024-25394

Name of the Vulnerable Software and Affected Versions Piotnet Addons For Elementor Pro versions through 7.1.17 Description A Server-Side Request Forgery SSRF issue affects Piotnet Addons For Elementor Pro. This allows an attacker to make unauthorized requests on behalf of the server...

CVE-2024-33634: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17...

CVE-2024-33633: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Piotnet Piotnet Addons For Elementor Pro allows Reflected XSS.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17...