Path Traversal Vulnerability in Elementor Forms Drag and Drop File Upload by Add-Ons.org
CVE-2025-47492

8.6HIGH

Key Information:

Vendor

WordPress
Status
Drag And Drop File Upload For Elementor Forms
Vendor
CVE Published:
23 May 2025

What is CVE-2025-47492?

A vulnerability in the Drag and Drop File Upload for Elementor Forms allows attackers to exploit improper limitations on pathname access. This could enable unauthorized file uploads by manipulating directory paths. Affected versions are earlier than 1.4.3. Users are advised to update to secure their web applications against potential unauthorized access and data exposure.

Affected Version(s)

Drag and Drop File Upload for Elementor Forms <= 1.4.3

References

https://patchstack.com/database/wordpress/plugin/drag-and...
vdb-entry

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

0xd4rk5id3 (Patchstack Alliance)
.