CVE-2026-28192

CriticalCVSS 9.6

Published: 18/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Summary

The Piotnet Addons For Elementor Pro plugin versions up to 7.1.67 contains a vulnerability allowing unauthenticated arbitrary file upload.

An attacker can upload malicious files, potentially leading to website takeover or remote code execution.

Immediately update the plugin to the latest version that fixes this vulnerability.

Original NVD description (English source)

Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro <= 7.1.67 versions.