CVE Catalog
CVE-2026-28192
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.23%
15th percentile - higher than 15% of all known CVEs
Summary
The Piotnet Addons For Elementor Pro plugin versions up to 7.1.67 contains a vulnerability allowing unauthenticated arbitrary file upload.
Risk Assessment
An attacker can upload malicious files, potentially leading to website takeover or remote code execution.
Recommendation
Immediately update the plugin to the latest version that fixes this vulnerability.
Other vulnerabilities in Piotnet Addons For Elementor Pro
Original NVD description (English source)
Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro <= 7.1.67 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS