CVE-2026-18351 | CVSS: 9.8 | 严重级别: CRITICAL
The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via the elementor_file_upload function. This is due to insufficient file type validation in the is_file_type_valid() function, which uses the attacker-controlled 'type' parameter as regex keys in the MIME allowlist, allowing blacklist bypass via a crafted extension that sanitize_file_name() later normalizes to a PHP extension. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code
参考链接:
• https://plugins.svn.wordpress.org/drag-and-drop-file-upload-for-elementor-forms/
• https://plugins.svn.wordpress.org/drag-and-drop-file-upload-for-elementor-forms/
• https://plugins.trac.wordpress.org/browser/drag-and-drop-file-upload-for-element
📌 数据来源: NVD 官方