{"cvss":10.0,"datePublished":"2026-11-04T00:00:00Z","dateUpdated":"2026-11-04T00:00:00Z","description":"Unrestricted Upload of File with Dangerous Type vulnerability in add-ons.org Drag and Drop File Upload for Elementor Forms drag-and-drop-file-upload-for-elementor-forms allows Upload a Web Shell to a Web Server.This issue affects Drag and Drop File Upload for Elementor Forms: from n/a through <= 1.5.3.","dueDate":"","id":"CVE-2025-49387","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Drag and Drop File Upload for Elementor Forms","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"  Unrestricted Upload of File with Dangerous Type","vendor":"add-ons.org"}