CVE-2026-45443

MediumCVSS 5.0

Published: 20/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile - higher than 9% of all known CVEs

Summary

Missing authorization in PDF for Elementor Forms + Drag And Drop Template Builder (up to 5.5.1) allows exploiting incorrectly configured access control security levels.

Risk Assessment

Attackers can gain unauthorized access to plugin features, potentially modifying PDF templates or accessing sensitive data.

Recommendation

Update the plugin to a version above 5.5.1 and implement proper access controls.

Original NVD description (English source)

Missing Authorization vulnerability in ADD-ONS.ORG PDF for Elementor Forms + Drag And Drop Template Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through 5.5.1.