Vulnerabilities in addonsorg

5 results

Vexday analysis

A addonsorg apresenta um perfil de risco baixo com apenas 3 vulnerabilidades catalogadas na base e nenhuma sob exploração ativa. Não há registros de vulnerabilidades críticas ou recentes, sendo a fraqueza dominante relacionada a upload de arquivo (CWE-434), típica de aplicações web. O fornecedor não representa ameaça imediata ao portfólio.

CVE-2026-5364HIGHDrag and Drop File Upload for Contact Form 7 <= 1.1.3 - Unauthenticated Arbitrary File Upload via sanitize_file_name BypassEPSS 1.1%CVE-2024-12593MEDIUMPDF for WPForms + Drag and Drop Template Builder <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via yeepdf_dotab ShortcodeEPSS 0.4%CVE-2026-84293HIGHRepeater Fields for Gravity Forms <= 3.0.4 - Unauthenticated Stored Cross-Site Scripting via Repeated Multi-Input Sub-Field ValuesEPSS 0.3%CVE-2025-14074MEDIUMPDF for Contact Form 7 + Drag and Drop Template Builder <= 6.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post DuplicationEPSS 0.2%CVE-2026-18351CRITICALDrag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' ParameterEPSS —