PressPilot Frontend Editor for Avada

PressPilot Frontend Editor for Avada lets authenticated users create and edit standard WordPress posts directly from the frontend, without accessing wp-admin.

Designed for editorial workflows where non-admin users need a clean writing experience while administrators keep full control over permissions, status transitions, authorship, and media uploads.

Developed and maintained by CardeeTech.

Key capabilities:

• Frontend create/edit form for standard posts

• Frontend listing of posts with direct edit links

• TinyMCE editor, excerpt, categories, tags, post status, and scheduled date

• Featured image upload or external URL (with SSRF protections)

• Avada Builder native elements for the two core shortcodes

• Internationalization-ready (fully translatable)

Security highlights:

• Nonce validation on all form submissions ( _ppfenonce )

• Capability-gated operations ( edit_posts, edit_post, edit_others_posts, publish_posts, upload_files )

• Strict sanitization and escaping throughout

• External image URL hardening: HTTPS-only, blocks localhost/private/link-local/metadata endpoints

Avada integration:

When Avada Builder is active, the plugin registers native Avada Builder elements for both shortcodes, so editors can add the frontend form and posts list using the visual drag-and-drop builder without writing shortcode syntax.

Shortcodes

• [ppfe_edit_post] — Main create/edit form.

• [ppfe_my_posts] — Current user’s post list with edit links.

• [ppfe_form] — Alias of [ppfe_edit_post].

Attributes for [ppfe_my_posts]:

• edit_page — URL of the editor page (e.g. edit_page="/write/" )