CVE-2026-4885

The Piotnet Addons for Elementor Pro plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the 'pafe_ajax_form_builder' function in all versions up to, and including, 7.1.70. The plugin uses an incomplete extension blacklist that only blocks php, phpt, php5, php7, and exe extensions, while allowing dangerous extensions such as .phar or .phtml to be uploaded. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Note: The exploit can only be exploited if a file field is added to the form.

• CWE-434

• https://pafe.piotnet.com/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/ffff2ff3-769d-4eb2-acbe-d8ce6f042581?source=cve

Published

May 19, 2026

Last Modified

Jul 24, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-48844Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1…7.5
• CVE-2026-48845In Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16 and 1.7…6.5
• CVE-2026-48846In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.…6.5
• CVE-2026-48847Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.…3.7
• CVE-2026-48848Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 h…7.2
• CVE-2026-48849In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.…4.4
• CVE-2026-48850PuTTY 0.72 before 0.84 has a double free in RSA KEX.5.9
• CVE-2026-48851PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a tr…3.1
• CVE-2026-48852PuTTY 0.71 before 0.84 has an assertion failure in ECDSA sig…3.7
• CVE-2026-48853Deserialization of Untrusted Data and Allocation of Resource…9.2
• CVE-2026-48854Allocation of Resources Without Limits or Throttling vulnera…8.7
• CVE-2026-48855Exposure of Sensitive Information to an Unauthorized Actor v…6.5