Add-Ons.org vulnerabilities

20 CVEs affecting Add-Ons.org products, 0 known to be exploited (CISA KEV), with EPSS scores. Most affected: PDF For Wpforms, PDF For Elementor Forms + Drag And Drop Template Builder, PDF Invoice Builder For Woocommerce, Drag And Drop File Upload For Elementor Forms, PDF For Contact Form 7.

• PDF For Wpforms: 5 CVEs
• PDF For Elementor Forms + Drag And Drop Template Builder: 4 CVEs
• PDF Invoice Builder For Woocommerce: 3 CVEs
• Drag And Drop File Upload For Elementor Forms: 2 CVEs
• PDF For Contact Form 7: 2 CVEs
• Cost Calculator For Elementor: 1 CVE
• Email Templates Customizer For WordPress – Drag And Drop Email Templates Builder – Yeemail: 1 CVE
• PDF For Gravity Forms + Drag And Drop Template Builder: 1 CVE
• Product File Upload For Woocommerce: 1 CVE