PressPilot Frontend Editor for Avada

PressPilot Frontend Editor for Avada lets authenticated users create and edit standard WordPress posts directly from the frontend, without accessing wp-admin.

Designed for editorial workflows where non-admin users need a clean writing experience while administrators keep full control over permissions, status transitions, authorship, and media uploads.

Developed and maintained by CardeeTech.

Key capabilities:

• Frontend create/edit form for standard posts
• Frontend listing of posts with direct edit links
• TinyMCE editor, excerpt, categories, tags, post status, and scheduled date
• Featured image upload or external URL (with SSRF protections)
• Avada Builder native elements for the two core shortcodes
• Internationalization-ready (fully translatable)

Security highlights:

• Nonce validation on all form submissions (_ppfenonce)
• Capability-gated operations (edit_posts, edit_post, edit_others_posts, publish_posts, upload_files)
• Strict sanitization and escaping throughout
• External image URL hardening: HTTPS-only, blocks localhost/private/link-local/metadata endpoints

Avada integration:

When Avada Builder is active, the plugin registers native Avada Builder elements for both shortcodes, so editors can add the frontend form and posts list using the visual drag-and-drop builder without writing shortcode syntax.

Shortcodes

• [ppfe_edit_post] — Main create/edit form.
• [ppfe_my_posts] — Current user’s post list with edit links.
• [ppfe_form] — Alias of [ppfe_edit_post].

Attributes for [ppfe_my_posts]:

• edit_page — URL of the editor page (e.g. edit_page="/write/")