Piotnet Addons For Elementor Pro

Piotnet Addons For Elementor Pro has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; none of them are fixed as of September 2026. Their average CVSS score is 7.0, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 1 high. 2024 was the busiest year with 5 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (29%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, Cross-Site Request Forgery (CSRF).

None of the 7 issues recorded for Piotnet Addons For Elementor Pro have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2024.

3 independent researchers contributed these findings, most of them (5) reported by Dave Jong.

Strategic Overview

Avg CVSSMedium

7.0/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Piotnet Addons For Elementor Pro vulnerabilities before they are exploited.

Most severe open issueCVSS 9.8CVE-2026-28192

Piotnet Addons For Elementor Pro <= 7.1.67 - Unauthenticated Arbitrary File Upload

Read the full analysis

Vulnerability Records

7 records


2026-08-13 00:00	Piotnet Addons For Elementor Pro <= 7.1.67 - Unauthenticated Arbitrary File Upload Piotnet Addons For Elementor Pro <= 7.1.67	`CVE-2026-28192`	9.8 Critical	0xd4rk5id3	No
2026-05-18 18:28	Piotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload via Form File Upload Piotnet Addons For Elementor Pro <= 7.1.70	`CVE-2026-4885`	9.8 Critical	Wannes Verwimp	No
2024-04-25 00:00	Piotnet Addons For Elementor Pro <= 7.1.17 - Missing Authorization to Arbitrary Post/Page Deletion Piotnet Addons For Elementor Pro <= 7.1.17	`CVE-2024-33635`	5.3 Medium	Dave Jong	No
2024-04-25 00:00	Piotnet Addons For Elementor Pro <= 7.1.17 - Unauthenticated Server-Side Request Forgery Piotnet Addons For Elementor Pro <= 7.1.17	`CVE-2024-33634`	7.2 High	Dave Jong	No
2024-04-25 00:00	Piotnet Addons For Elementor Pro <= 7.1.17 - Reflected Cross-Site Scripting Piotnet Addons For Elementor Pro <= 7.1.17	`CVE-2024-33633`	6.1 Medium	Dave Jong	No
2024-04-25 00:00	Piotnet Addons For Elementor Pro <= 7.1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting Piotnet Addons For Elementor Pro <= 7.1.17	`CVE-2024-33631`	6.4 Medium	Dave Jong	No
2024-04-25 00:00	Piotnet Addons For Elementor Pro <= 7.1.17 - Cross-Site Request Forgery Piotnet Addons For Elementor Pro <= 7.1.17	`CVE-2024-33632`	4.3 Medium	Dave Jong	No

Showing 1–7 of 7 reports