Log in Start free

ADD-ONS.ORG

Products

ProductCVEsExploitedLatest
PDF for WPForms5–Feb 20, 2026
PDF for Elementor Forms + Drag And Drop Template Builder4–May 20, 2026
PDF Invoice Builder for WooCommerce3–Dec 18, 2025
Drag and Drop File Upload for Elementor Forms2–Aug 28, 2025
PDF for Contact Form 72–Oct 9, 2026
Product File Upload for WooCommerce1–Mar 25, 2026
Email Templates Customizer for WordPress – Drag And Drop Email Templates Builder – YeeMail1–Jan 9, 2025
PDF for Gravity Forms + Drag And Drop Template Builder1–Dec 18, 2025
Cost Calculator for Elementor1–May 7, 2025

Exploited and recent CVEs

  • CVE-2026-94664 High 7.5 WordPress PDF for Contact Form 7 plugin <= 7.1.0 - Arbitrary File Download vulnerability 0.4%
  • CVE-2026-45443 Medium 5.0 WordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 5.5.1 - Broken Access Control vulnerability 0.2%
  • CVE-2026-25328 Medium 6.8 WordPress Product File Upload for WooCommerce plugin <= 2.2.4 - Arbitrary File Deletion vulnerability 0.4%
  • CVE-2026-22350 Medium 6.5 WordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 6.3.1 - Broken Access Control vulnerability 0.3%
  • CVE-2025-68534 Medium 6.5 WordPress PDF for WPForms plugin <= 6.3.0 - Broken Access Control vulnerability 0.3%
  • CVE-2025-60084 High 8.8 WordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 6.5.0 - PHP Object Injection vulnerability 0.4%
  • CVE-2025-60083 High 8.8 WordPress PDF Invoice Builder for WooCommerce plugin <= 6.5.0 - Deserialization of untrusted data vulnerability 0.4%
  • CVE-2025-60082 High 8.8 WordPress PDF for WPForms plugin <= 6.5.0 - Deserialization of untrusted data vulnerability 0.4%
  • CVE-2025-60081 High 8.8 WordPress PDF for Contact Form 7 plugin <= 6.5.0 - Deserialization of untrusted data vulnerability 0.4%
  • CVE-2025-60080 High 7.5 WordPress PDF for Gravity Forms + Drag And Drop Template Builder plugin <= 6.5.0 - PHP Object Injection vulnerability 0.4%
  • CVE-2025-58620 Medium 6.5 WordPress PDF for WPForms Plugin <= 6.2.1 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-49387 Critical 10.0 WordPress Drag and Drop File Upload for Elementor Forms Plugin <= 1.5.3 - Arbitrary File Upload Vulnerability 0.4%
  • CVE-2025-58208 Medium 6.5 WordPress PDF for Elementor Forms + Drag And Drop Template Builder Plugin <= 6.2.0 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-49289 Medium 5.0 WordPress PDF for WPForms plugin <= 5.5.0 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-47492 High 8.6 WordPress Drag and Drop File Upload for Elementor Forms plugin <= 1.4.3 - Arbitrary File Deletion Vulnerability 1.5%
  • CVE-2025-47537 High 7.6 WordPress PDF Invoice Builder for WooCommerce plugin <= 5.3.8 - SQL Injection Vulnerability 0.4%
  • CVE-2025-47476 Medium 6.5 WordPress Cost Calculator for Elementor plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-30767 Medium 5.4 WordPress PDF for WPForms plugin <= 5.3.0 - Arbitrary Shortcode Execution vulnerability 0.4%
  • CVE-2025-24755 Medium 6.5 WordPress PDF Invoice Builder for WooCommerce plugin <= 4.6.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-22802 Medium 6.5 WordPress Email Templates Customizer YeeMail plugin <= 2.1.4 - Cross Site Scripting (XSS) vulnerability 0.2%