https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-13T14:08:50.503590+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-124814 fkie_cve-2026-124814 2026-11-13T14:08:50.506446+00:00

The Ultimate Addons for Elementor Forms WordPress plugin before 1.0.8 does not properly validate the extension of uploaded files in its bundled file upload field, allowing unauthenticated users to upload arbitrary files such as PHP scripts and achieve remote code execution.

 https://db.gcve.eu/vuln/ghsa-xwg6-8rwf-j275 GHSA-xwg6-8rwf-j275 2026-11-13T14:08:50.506536+00:00

The Ultimate Addons for Elementor Forms WordPress plugin before 1.0.8 does not properly validate the extension of uploaded files in its bundled file upload field, allowing unauthenticated users to upload arbitrary files such as PHP scripts and achieve remote code execution.