Vulnerabilities / Drag and Drop File Upload for Elementor Forms
Drag and Drop File Upload for Elementor Forms vulnerabilities
Advisories WPSec published for Drag and Drop File Upload for Elementor Forms. Other sources may list more. Its attack surface: Drag and Drop File Upload for Elementor Forms on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-08 | WPSEC-2026-2734 | Drag and Drop File Upload for Elementor Forms <= 1.6.2 - Unauthenticated Path Traversal to File Overwrite and Deletion via Form Submission File Field | Medium 6.5 | 1.6.3 |
| 2026-11-08 | WPSEC-2026-2733 | Drag and Drop File Upload for Elementor Forms <= 1.6.2 - Unauthenticated Arbitrary File Deletion via Form Submission File Field | High 7.4 | 1.6.3 |
License: CC BY 4.0