Pdf For Elementor Forms Vulnerabilities

The PDF for Elementor Forms + Drag And Drop Template Builder plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 5.5.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauth...

CVSS:

4.3

Affected:

up to 5.5.1

Fixed in:

5.6.1

Disclosed:

May 20, 2026

CVE-2026-45443 on NVD →

The PDF for Elementor Forms + Drag And Drop Template Builder plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 6.3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an un...

CVSS:

4.3

Affected:

up to 6.3.1

Fixed in:

6.5.0

Disclosed:

Feb 11, 2026

CVE-2026-22350 on NVD →

The PDF for Elementor Forms + Drag And Drop Template Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above,...

CVSS:

6.4

Affected:

up to 6.2.0

Fixed in:

6.3.0

Disclosed:

Aug 27, 2025

CVE-2025-58208 on NVD →

The PDF for Elementor Forms + Drag And Drop Template Builder plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 6.5.0 via deserialization of untrusted input. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject a PHP Object. No k...

CVSS:

7.5

Affected:

up to 6.5.0

Fixed in:

6.5.1

Disclosed:

Aug 22, 2025

CVE-2025-60084 on NVD →