CVE-2026-28192

Piotnet Addons for Elementor Pro versions up to 7.1.67 are vulnerable to an unauthenticated arbitrary file upload, allowing attackers to upload malicious files without authentication. This critical vulnerability could lead to remote code execution, potentially compromising the affected web applications and their data. Organizations using these versions should prioritize immediate patching to mitigate the risk of exploitation.