CVE-2026-124814 | Elementor Ultimate Addons for Elementor Forms Plugin up to 1.0.7 on WordPress unrestricted upload

November 12, 2026 Yanac

A vulnerability has been found in Elementor Ultimate Addons for Elementor Forms Plugin up to 1.0.7 on WordPress and classified as critical. This affects an unknown function. Performing a manipulation results in unrestricted upload.

This vulnerability is reported as CVE-2026-124814. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More