{"uuid": "52e9c55f-4e02-461c-95cf-2dff82a0b74a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18351", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv52pwtwai25", "content": "Drag and Drop File Upload for Elementor Forms <=1.6.0 hit by CRITICAL CVE-2026-18351. Unauthenticated attackers can upload files & achieve RCE. Restrict plugin until patch confirmed. https://radar.offseq.com/threat/cve-2026-18351-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-addonsor...", "creation_timestamp": "2026-09-10T03:00:33.579856Z"}