How many CVEs does add-ons.org have?

add-ons.org has 22 published CVE records since 2025, including 22 in the last two years.

How many add-ons.org CVEs are in CISA KEV?

None of add-ons.org's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which add-ons.org products have the most CVEs?

The add-ons.org products with the most published CVEs are PDF for WPForms, PDF for Elementor Forms + Drag And Drop Template Builder, PDF Invoice Builder for WooCommerce, Drag and Drop File Upload for Elementor Forms, PDF for Contact Form 7 + Drag and Drop Template Builder.

What are the most common weakness types in add-ons.org CVEs?

add-ons.org's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-502 (Deserialization of Untrusted Data), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

Are there public exploits for add-ons.org vulnerabilities?

No add-ons.org CVEs currently have a tracked public exploit in this dataset.

How many critical add-ons.org vulnerabilities are there?

add-ons.org has 1 critical and 8 high-severity CVEs.

What is the average severity of add-ons.org CVEs?

The average CVSS base score across add-ons.org's scored CVEs is 7.1.

add-ons.org Vulnerabilities: CVEs, CISA KEV & Security Advisories

Average CVSS: 7.1
Critical / high: 41%
Actively exploited (KEV): 0%
Public exploit available: 0%
Patch available: 100%

add-ons.org Vulnerabilities

Overview

Security scorecard

Severity and exploitation

Most affected products

Common weakness types

CNAs that assign these CVEs

Disclosure activity by year

Latest add-ons.org CVEs

Other vendors

Frequently asked questions

References

Track add-ons.org vulnerabilities